audit: Add new syscalls to the perm=w filter
authorSteve Grubb <sgrubb@redhat.com>
Fri, 13 Oct 2017 03:24:01 +0000 (23:24 -0400)
committerPaul Moore <paul@paul-moore.com>
Fri, 10 Nov 2017 21:08:28 +0000 (16:08 -0500)
commit6e66ec3cae02952fcfc285cb156c11dcc61f4453
tree805fc6f8b32ae9976aca21263800e8bd0bc3250e
parent5d842a5b77a58160625548fa6be2dc159179ffdb
audit: Add new syscalls to the perm=w filter

The audit subsystem allows selecting audit events based on watches for
a particular behavior like writing to a file. A lot of syscalls have
been added without updating the list. This patch adds 2 syscalls to the
write filters: fallocate and renameat2.

Signed-off-by: Steve Grubb <sgrubb@redhat.com>
Reviewed-by: Richard Guy Briggs <rgb@redhat.com>
[PM: cleaned up some whitespace errors]
Signed-off-by: Paul Moore <paul@paul-moore.com>
include/asm-generic/audit_dir_write.h
include/asm-generic/audit_write.h