[XFRM]: xfrm audit calls
This patch modifies the current ipsec audit layer by breaking it up into purpose driven audit calls. So far, the only audit calls made are when add/delete an SA/policy. It had been discussed to give each key manager it's own calls to do this, but I found there to be much redundnacy since they did the exact same things, except for how they got auid and sid, so I combined them. The below audit calls can be made by any key manager. Hopefully, this is ok. Signed-off-by:Joy Latten <latten@austin.ibm.com> Signed-off-by:
David S. Miller <davem@davemloft.net>
Showing
- include/linux/audit.h 5 additions, 4 deletionsinclude/linux/audit.h
- include/net/xfrm.h 36 additions, 4 deletionsinclude/net/xfrm.h
- net/key/af_key.c 10 additions, 11 deletionsnet/key/af_key.c
- net/xfrm/xfrm_policy.c 77 additions, 133 deletionsnet/xfrm/xfrm_policy.c
- net/xfrm/xfrm_state.c 77 additions, 12 deletionsnet/xfrm/xfrm_state.c
- net/xfrm/xfrm_user.c 13 additions, 13 deletionsnet/xfrm/xfrm_user.c
Loading
Please register or sign in to comment