| From 5bc886737004b0b1e4ec314823eaccf7e70ce8f8 Mon Sep 17 00:00:00 2001 |
| From: Sasha Levin <sashal@kernel.org> |
| Date: Mon, 24 Nov 2025 20:49:30 +0100 |
| Subject: audit: add fchmodat2() to change attributes class |
| |
| From: Jeffrey Bencteux <jeff@bencteux.fr> |
| |
| [ Upstream commit 4f493a6079b588cf1f04ce5ed6cdad45ab0d53dc ] |
| |
| fchmodat2(), introduced in version 6.6 is currently not in the change |
| attribute class of audit. Calling fchmodat2() to change a file |
| attribute in the same fashion than chmod() or fchmodat() will bypass |
| audit rules such as: |
| |
| -w /tmp/test -p rwa -k test_rwa |
| |
| The current patch adds fchmodat2() to the change attributes class. |
| |
| Signed-off-by: Jeffrey Bencteux <jeff@bencteux.fr> |
| Signed-off-by: Paul Moore <paul@paul-moore.com> |
| Signed-off-by: Sasha Levin <sashal@kernel.org> |
| --- |
| include/asm-generic/audit_change_attr.h | 3 +++ |
| 1 file changed, 3 insertions(+) |
| |
| diff --git a/include/asm-generic/audit_change_attr.h b/include/asm-generic/audit_change_attr.h |
| index 331670807cf01..6c311d4d37f4e 100644 |
| --- a/include/asm-generic/audit_change_attr.h |
| +++ b/include/asm-generic/audit_change_attr.h |
| @@ -20,6 +20,9 @@ __NR_fremovexattr, |
| __NR_fchownat, |
| __NR_fchmodat, |
| #endif |
| +#ifdef __NR_fchmodat2 |
| +__NR_fchmodat2, |
| +#endif |
| #ifdef __NR_chown32 |
| __NR_chown32, |
| __NR_fchown32, |
| -- |
| 2.51.0 |
| |
