iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3e5d1310f3
linux/kernel
History
Richard Guy Briggs 92a69ad6ae audit: print empty EXECVE args 
[ Upstream commit ea956d8be91edc702a98b7fe1f9463e7ca8c42ab ]

Empty executable arguments were being skipped when printing out the list
of arguments in an EXECVE record, making it appear they were somehow
lost.  Include empty arguments as an itemized empty string.

Reproducer:
	autrace /bin/ls "" "/etc"
	ausearch --start recent -m execve -i | grep EXECVE
	type=EXECVE msg=audit(10/03/2018 13:04:03.208:1391) : argc=3 a0=/bin/ls a2=/etc

With fix:
	type=EXECVE msg=audit(10/03/2018 21:51:38.290:194) : argc=3 a0=/bin/ls a1= a2=/etc
	type=EXECVE msg=audit(1538617898.290:194): argc=3 a0="/bin/ls" a1="" a2="/etc"

Passes audit-testsuite.  GH issue tracker at
https://github.com/linux-audit/audit-kernel/issues/99

Signed-off-by: Richard Guy Briggs <rgb@redhat.com>
[PM: cleaned up the commit metadata]
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2019-12-01 09:14:03 +01:00
..
bpf
bpf: devmap: fix wrong interface selection in notifier_call
2019-12-01 09:13:47 +01:00
cgroup
cgroup: Fix css_task_iter_advance_css_set() cset skip condition
2019-08-09 17:53:37 +02:00
configs
ANDROID: binder: add hwbinder,vndbinder to BINDER_DEVICES.
2017-08-22 18:43:23 -07:00
debug
kdb: Don't back trace on a cpu that didn't round up
2019-02-12 19:46:09 +01:00
events
signal: Properly deliver SIGILL from uprobes
2019-11-20 17:59:52 +01:00
gcov
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
irq
genirq: Prevent NULL pointer dereference in resend_irqs()
2019-09-19 09:08:04 +02:00
livepatch
livepatch: Nullify obj->mod in klp_module_coming()'s error path
2019-10-07 18:55:09 +02:00
locking
Revert "locking/pvqspinlock: Don't wait if vCPU is preempted"
2019-10-11 18:18:36 +02:00
power
x86/power: Fix 'nosmt' vs hibernation triple fault during resume
2019-06-11 12:21:48 +02:00
printk
printk: fix integer overflow in setup_log_buf()
2019-12-01 09:13:17 +01:00
rcu
rcuperf: Fix cleanup path for invalid perf_type strings
2019-05-31 06:47:33 -07:00
sched
sched/fair: Don't increase sd->balance_interval on newidle balance
2019-12-01 09:14:02 +01:00
time
tick: broadcast-hrtimer: Fix a race in bc_set_next
2019-10-11 18:18:46 +02:00
trace
tracing: Initialize iter->seq after zeroing in tracing_read_pipe()
2019-11-06 12:43:20 +01:00
.gitignore
…
acct.c
kernel/acct.c: fix the acct->needcheck check in check_free_space()
2018-01-10 09:31:17 +01:00
async.c
kernel/async.c: revert "async: simplify lowest_in_progress()"
2018-02-16 20:23:05 +01:00
audit_fsnotify.c
Merge branch 'fsnotify' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs
2017-05-03 11:05:15 -07:00
audit_tree.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
audit_watch.c
audit: fix use-after-free in audit_add_watch
2018-09-26 08:38:09 +02:00
audit.c
audit: return on memory error to avoid null pointer dereference
2018-05-30 07:52:39 +02:00
audit.h
ipc: mqueue: Replace timespec with timespec64
2017-09-03 20:21:24 -04:00
auditfilter.c
audit: fix a memory leak bug
2019-05-31 06:47:25 -07:00
auditsc.c
audit: print empty EXECVE args
2019-12-01 09:14:03 +01:00
backtracetest.c
…
bounds.c
kbuild: fix kernel/bounds.c 'W=1' warning
2018-11-13 11:15:08 -08:00
capability.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
compat.c
compat: fix 4-byte infoleak via uninitialized struct field
2018-05-16 10:10:26 +02:00
configs.c
…
context_tracking.c
…
cpu_pm.c
PM / CPU: replace raw_notifier with atomic_notifier
2017-07-31 13:09:49 +02:00
cpu.c
cpu/SMT: State SMT is disabled even with nosmt and without "=force"
2019-11-24 08:23:08 +01:00
crash_core.c
kdump: write correct address of mem_section into vmcoreinfo
2018-01-17 09:45:27 +01:00
crash_dump.c
…
cred.c
access: avoid the RCU grace period for the temporary subjective credentials
2019-07-31 07:28:58 +02:00
delayacct.c
delayacct: Use raw_spinlocks
2018-08-03 07:50:38 +02:00
dma.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
elfcore.c
kernel/elfcore.c: include proper prototypes
2019-10-11 18:18:42 +02:00
exec_domain.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
exit.c
cgroup: Call cgroup_release() before __exit_signal()
2019-08-09 17:53:36 +02:00
extable.c
extable: Enable RCU if it is not watching in kernel_text_address()
2017-09-23 16:50:20 -04:00
fork.c
kernel/sysctl.c: do not override max_threads provided by userspace
2019-10-17 13:43:45 -07:00
freezer.c
…
futex_compat.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
futex.c
locking/futex: Allow low-level atomic operations to return -EAGAIN
2019-05-10 17:53:15 +02:00
groups.c
kernel: make groups_sort calling a responsibility group_info allocators
2017-12-20 10:10:18 +01:00
hung_task.c
kernel: hung_task.c: disable on suspend
2019-04-20 09:15:05 +02:00
irq_work.c
…
jump_label.c
sched/core: Fix cpu.max vs. cpuhotplug deadlock
2018-12-05 19:41:17 +01:00
kallsyms.c
kallsyms: Don't let kallsyms_lookup_size_offset() fail on retrieving the first symbol
2019-09-21 07:15:38 +02:00
kcmp.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
Kconfig.freezer
…
Kconfig.hz
…
Kconfig.locks
…
Kconfig.preempt
…
kcov.c
kcov: ensure irq code sees a valid area
2018-08-03 07:50:22 +02:00
kexec_core.c
kexec: Allocate decrypted control pages for kdump if SME is enabled
2019-11-24 08:23:15 +01:00
kexec_file.c
kexec_file: adjust declaration of kexec_purgatory
2017-07-12 16:26:02 -07:00
kexec_internal.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
kexec.c
kdump: protect vmcoreinfo data under the crash memory
2017-07-12 16:26:00 -07:00
kmod.c
kmod: move #ifdef CONFIG_MODULES wrapper to Makefile
2017-09-08 18:26:51 -07:00
kprobes.c
kprobes: Don't call BUG_ON() if there is a kprobe in use on free list
2019-11-20 17:59:56 +01:00
ksysfs.c
kexec: move vmcoreinfo out of the kernel's .bss section
2017-07-12 16:25:59 -07:00
kthread.c
kthread, tracing: Don't expose half-written comm when creating kthreads
2018-08-03 07:50:21 +02:00
latencytop.c
…
Makefile
x86/uaccess, kcov: Disable stack protector
2019-06-19 08:20:56 +02:00
memremap.c
mm, devm_memremap_pages: kill mapping "System RAM" support
2019-01-13 10:01:02 +01:00
module_signing.c
…
module-internal.h
…
module.c
kernel/module: Fix mem leak in module_add_modinfo_attrs
2019-09-16 08:20:46 +02:00
notifier.c
…
nsproxy.c
…
padata.c
padata: use smp_mb in padata_reorder to avoid orphaned padata jobs
2019-07-31 07:28:39 +02:00
panic.c
panic: ensure preemption is disabled during panic()
2019-10-17 13:43:19 -07:00
params.c
kernel/params.c: improve STANDARD_PARAM_DEF readability
2017-10-03 17:54:26 -07:00
pid_namespace.c
signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig
2019-07-31 07:28:21 +02:00
pid.c
pids: make task_tgid_nr_ns() safe
2017-08-21 12:47:31 -07:00
profile.c
…
ptrace.c
ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME
2019-07-10 09:54:38 +02:00
range.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
reboot.c
…
relay.c
relay: check return of create_buf_file() properly
2019-03-13 14:03:20 -07:00
resource.c
resource: fix integer overflow at reallocation
2018-04-24 09:36:22 +02:00
seccomp.c
seccomp: Move speculation migitation control to arch code
2018-05-22 18:54:04 +02:00
signal.c
signal: Always ignore SIGKILL and SIGSTOP sent to the global init
2019-11-20 17:59:52 +01:00
smp.c
cpu/hotplug: Fix "SMT disabled by BIOS" detection for KVM
2019-02-12 19:46:13 +01:00
smpboot.c
watchdog/core, powerpc: Lock cpus across reconfiguration
2017-10-04 10:53:54 +02:00
smpboot.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
softirq.c
Mark HI and TASKLET softirq synchronous
2018-08-15 18:12:47 +02:00
stacktrace.c
…
stop_machine.c
stop_machine: Atomically queue and wake stopper threads
2018-09-05 09:26:36 +02:00
sys_ni.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
sys.c
kernel/sys.c: prctl: fix false positive in validate_prctl_map()
2019-06-15 11:54:52 +02:00
sysctl_binary.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
sysctl.c
sysctl: return -EINVAL if val violates minmax
2019-06-15 11:54:51 +02:00
task_work.c
locking/barriers: Convert users of lockless_dereference() to READ_ONCE()
2017-12-25 14:26:21 +01:00
taskstats.c
taskstats: add e/u/stime for TGID command
2017-05-08 17:15:12 -07:00
test_kprobes.c
…
torture.c
torture: Fix typo suppressing CPU-hotplug statistics
2017-07-25 13:04:45 -07:00
tracepoint.c
tracepoint: Do not warn on ENOMEM
2018-05-09 09:51:50 +02:00
tsacct.c
…
ucount.c
…
uid16.c
kernel: make groups_sort calling a responsibility group_info allocators
2017-12-20 10:10:18 +01:00
umh.c
kmod: split out umh code into its own file
2017-09-08 18:26:50 -07:00
up.c
smp: Avoid using two cache lines for struct call_single_data
2017-08-29 15:14:38 +02:00
user_namespace.c
userns: move user access out of the mutex
2018-09-09 19:56:00 +02:00
user-return-notifier.c
…
user.c
…
utsname_sysctl.c
sys: don't hold uts_sem while accessing userspace memory
2018-09-09 19:56:00 +02:00
utsname.c
…
watchdog_hld.c
watchdog: Mark watchdog touch functions as notrace
2018-09-05 09:26:42 +02:00
watchdog.c
watchdog: Mark watchdog touch functions as notrace
2018-09-05 09:26:42 +02:00
workqueue_internal.h
Merge branch 'for-4.14-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/wq
2017-11-06 12:26:49 -08:00
workqueue.c
watchdog: Mark watchdog touch functions as notrace
2018-09-05 09:26:42 +02:00