mirror of
https://github.com/adulau/aha.git
synced 2024-12-28 03:36:19 +00:00
[PATCH] log ppid
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
This commit is contained in:
parent
e1396065e0
commit
f46038ff7d
1 changed files with 5 additions and 2 deletions
|
@ -60,6 +60,7 @@
|
||||||
#include <linux/tty.h>
|
#include <linux/tty.h>
|
||||||
#include <linux/selinux.h>
|
#include <linux/selinux.h>
|
||||||
#include <linux/binfmts.h>
|
#include <linux/binfmts.h>
|
||||||
|
#include <linux/syscalls.h>
|
||||||
|
|
||||||
#include "audit.h"
|
#include "audit.h"
|
||||||
|
|
||||||
|
@ -156,7 +157,7 @@ struct audit_context {
|
||||||
struct audit_aux_data *aux;
|
struct audit_aux_data *aux;
|
||||||
|
|
||||||
/* Save things to print about task_struct */
|
/* Save things to print about task_struct */
|
||||||
pid_t pid;
|
pid_t pid, ppid;
|
||||||
uid_t uid, euid, suid, fsuid;
|
uid_t uid, euid, suid, fsuid;
|
||||||
gid_t gid, egid, sgid, fsgid;
|
gid_t gid, egid, sgid, fsgid;
|
||||||
unsigned long personality;
|
unsigned long personality;
|
||||||
|
@ -379,6 +380,7 @@ static inline struct audit_context *audit_get_context(struct task_struct *tsk,
|
||||||
}
|
}
|
||||||
|
|
||||||
context->pid = tsk->pid;
|
context->pid = tsk->pid;
|
||||||
|
context->ppid = sys_getppid(); /* sic. tsk == current in all cases */
|
||||||
context->uid = tsk->uid;
|
context->uid = tsk->uid;
|
||||||
context->gid = tsk->gid;
|
context->gid = tsk->gid;
|
||||||
context->euid = tsk->euid;
|
context->euid = tsk->euid;
|
||||||
|
@ -614,7 +616,7 @@ static void audit_log_exit(struct audit_context *context, struct task_struct *ts
|
||||||
tty = "(none)";
|
tty = "(none)";
|
||||||
audit_log_format(ab,
|
audit_log_format(ab,
|
||||||
" a0=%lx a1=%lx a2=%lx a3=%lx items=%d"
|
" a0=%lx a1=%lx a2=%lx a3=%lx items=%d"
|
||||||
" pid=%d auid=%u uid=%u gid=%u"
|
" ppid=%d pid=%d auid=%u uid=%u gid=%u"
|
||||||
" euid=%u suid=%u fsuid=%u"
|
" euid=%u suid=%u fsuid=%u"
|
||||||
" egid=%u sgid=%u fsgid=%u tty=%s",
|
" egid=%u sgid=%u fsgid=%u tty=%s",
|
||||||
context->argv[0],
|
context->argv[0],
|
||||||
|
@ -622,6 +624,7 @@ static void audit_log_exit(struct audit_context *context, struct task_struct *ts
|
||||||
context->argv[2],
|
context->argv[2],
|
||||||
context->argv[3],
|
context->argv[3],
|
||||||
context->name_count,
|
context->name_count,
|
||||||
|
context->ppid,
|
||||||
context->pid,
|
context->pid,
|
||||||
context->loginuid,
|
context->loginuid,
|
||||||
context->uid,
|
context->uid,
|
||||||
|
|
Loading…
Reference in a new issue