1*4882a593Smuzhiyun /* SPDX-License-Identifier: GPL-2.0 */ 2*4882a593Smuzhiyun /* 3*4882a593Smuzhiyun * Authors: Thiébaud Weksteen <tweek@google.com> 4*4882a593Smuzhiyun * Peter Enderborg <Peter.Enderborg@sony.com> 5*4882a593Smuzhiyun */ 6*4882a593Smuzhiyun #undef TRACE_SYSTEM 7*4882a593Smuzhiyun #define TRACE_SYSTEM avc 8*4882a593Smuzhiyun 9*4882a593Smuzhiyun #if !defined(_TRACE_SELINUX_H) || defined(TRACE_HEADER_MULTI_READ) 10*4882a593Smuzhiyun #define _TRACE_SELINUX_H 11*4882a593Smuzhiyun 12*4882a593Smuzhiyun #include <linux/tracepoint.h> 13*4882a593Smuzhiyun 14*4882a593Smuzhiyun TRACE_EVENT(selinux_audited, 15*4882a593Smuzhiyun 16*4882a593Smuzhiyun TP_PROTO(struct selinux_audit_data *sad, 17*4882a593Smuzhiyun char *scontext, 18*4882a593Smuzhiyun char *tcontext, 19*4882a593Smuzhiyun const char *tclass 20*4882a593Smuzhiyun ), 21*4882a593Smuzhiyun 22*4882a593Smuzhiyun TP_ARGS(sad, scontext, tcontext, tclass), 23*4882a593Smuzhiyun 24*4882a593Smuzhiyun TP_STRUCT__entry( 25*4882a593Smuzhiyun __field(u32, requested) 26*4882a593Smuzhiyun __field(u32, denied) 27*4882a593Smuzhiyun __field(u32, audited) 28*4882a593Smuzhiyun __field(int, result) 29*4882a593Smuzhiyun __string(scontext, scontext) 30*4882a593Smuzhiyun __string(tcontext, tcontext) 31*4882a593Smuzhiyun __string(tclass, tclass) 32*4882a593Smuzhiyun ), 33*4882a593Smuzhiyun 34*4882a593Smuzhiyun TP_fast_assign( 35*4882a593Smuzhiyun __entry->requested = sad->requested; 36*4882a593Smuzhiyun __entry->denied = sad->denied; 37*4882a593Smuzhiyun __entry->audited = sad->audited; 38*4882a593Smuzhiyun __entry->result = sad->result; 39*4882a593Smuzhiyun __assign_str(tcontext, tcontext); 40*4882a593Smuzhiyun __assign_str(scontext, scontext); 41*4882a593Smuzhiyun __assign_str(tclass, tclass); 42*4882a593Smuzhiyun ), 43*4882a593Smuzhiyun 44*4882a593Smuzhiyun TP_printk("requested=0x%x denied=0x%x audited=0x%x result=%d scontext=%s tcontext=%s tclass=%s", 45*4882a593Smuzhiyun __entry->requested, __entry->denied, __entry->audited, __entry->result, 46*4882a593Smuzhiyun __get_str(scontext), __get_str(tcontext), __get_str(tclass) 47*4882a593Smuzhiyun ) 48*4882a593Smuzhiyun ); 49*4882a593Smuzhiyun 50*4882a593Smuzhiyun #endif 51*4882a593Smuzhiyun 52*4882a593Smuzhiyun /* This part must be outside protection */ 53*4882a593Smuzhiyun #include <trace/define_trace.h> 54