[PATCH 2/2] audit,x86: add x32_execve[at] to syscall classification
Greg KH
gregkh at linuxfoundation.org
Fri Mar 6 17:45:51 UTC 2015
On Fri, Mar 06, 2015 at 03:40:38PM +0000, David Drysdale wrote:
> Treat x32 ABI variants of execve[at] the same as x86_64
> variants.
>
> Slightly speculative as the audit subsystem doesn't currently
> work with x32 ABI syscalls. If and when audit+x32 does work,
> this should correctly classify exec calls.
>
> Signed-off-by: David Drysdale <drysdale at google.com>
> ---
> arch/x86/kernel/audit_64.c | 6 ++++++
> 1 file changed, 6 insertions(+)
<formletter>
Cc: stable <stable at vger.kernel.org>
This is not the correct way to submit patches for inclusion in the
stable kernel tree. Please read Documentation/stable_kernel_rules.txt
for how to do this properly.
</formletter>
More information about the Linux-audit
mailing list