audit: deliver signal_info regarless of syscall
authorRichard Guy Briggs <rgb@redhat.com>
Fri, 10 May 2019 16:21:49 +0000 (12:21 -0400)
committerPaul Moore <paul@paul-moore.com>
Wed, 22 May 2019 02:18:25 +0000 (22:18 -0400)
commitb48345aafb203803ccda4488cb5409b1ed435c0a
tree025ceffb2d6792a15b495c64d9de565c5baf2c9d
parenta188339ca5a396acc588e5851ed7e19f66b0ebd9
audit: deliver signal_info regarless of syscall

When a process signals the audit daemon (shutdown, rotate, resume,
reconfig) but syscall auditing is not enabled, we still want to know the
identity of the process sending the signal to the audit daemon.

Move audit_signal_info() out of syscall auditing to general auditing but
create a new function audit_signal_info_syscall() to take care of the
syscall dependent parts for when syscall auditing is enabled.

Please see the github kernel audit issue
https://github.com/linux-audit/audit-kernel/issues/111

Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
include/linux/audit.h
kernel/audit.c
kernel/audit.h
kernel/auditsc.c
kernel/signal.c