Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux
1
fork

Configure Feed

Select the types of activity you want to include in your feed.

audit: add fchmodat2() to change attributes class

fchmodat2(), introduced in version 6.6 is currently not in the change
attribute class of audit. Calling fchmodat2() to change a file
attribute in the same fashion than chmod() or fchmodat() will bypass
audit rules such as:

-w /tmp/test -p rwa -k test_rwa

The current patch adds fchmodat2() to the change attributes class.

Signed-off-by: Jeffrey Bencteux <jeff@bencteux.fr>
Signed-off-by: Paul Moore <paul@paul-moore.com>

authored by

Jeffrey Bencteux and committed by
Paul Moore
4f493a60 8f0b4cce

+3
+3
include/asm-generic/audit_change_attr.h
··· 26 26 __NR_fchownat, 27 27 __NR_fchmodat, 28 28 #endif 29 + #ifdef __NR_fchmodat2 30 + __NR_fchmodat2, 31 + #endif 29 32 #ifdef __NR_chown32 30 33 __NR_chown32, 31 34 __NR_fchown32,