From nobody Sat Sep 26 10:01:17 2026 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 32B824A387C for ; Wed, 2 Sep 2026 14:44:35 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=170.10.129.124 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360277; cv=none; b=GfFqDm61j3y+pPuUxSIIE1ZvBECI+NcvGojfKP2AQqoxKPJq1QgqDCp0lKuNcxFHRvdlJ+uodJtDHVeCLlfhRym8MNrZFewAmXTeiSl4DW8Q9d5wdoGhvYe4eQpsMs/BYP5H0l6Ezn8LGfg6DxXGIanxPeLeUhiA1dtyjnFQnLY= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360277; c=relaxed/simple; bh=YYJcWSK0o8g3JZG0m9jWuvgOSpeoKqWZxSBIxDt0t+Y=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=fzjc/mSty8EFbjsINARks7jv65JwUmh5M+hLTCSB36ndbGYgUpAZApYm7+bh0LLwbbuXN/NBjmtePDCsC8mr3Hjz6v5EuEcW1rdw/p5o6+IgMjhRM8Qr/mWK6bnXEWzkprW34Nb4zj6kATWh6rj5EXpN3M6wYVYE/Uuqv/esuUk= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com; spf=pass smtp.mailfrom=redhat.com; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b=ACWU0Iwy; arc=none smtp.client-ip=170.10.129.124 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=redhat.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b="ACWU0Iwy" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1788360273; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=2JnrEcZXT7a4Ko8RzDbmeGNWkBaG45AGwndXeHnOoAk=; b=ACWU0IwyhJjAcDBGVJXfeuaDFptsi0u12vv1ShnAG/jLMEt9YHrBRCbQDWUKVpp8m7ZL7Q 3L2/n3v6jaTNf5n+i0fgnx6rrHOnv7gmXCNTwpZXXlOU3fwrKNEZxA9LMQ2wt2KBqjmESk RfJTYhp8YZqNvVYaoBFAKDH8lmAGI6c= Received: from mx-prod-mc-03.mail-002.prod.us-west-2.aws.redhat.com (ec2-54-186-198-63.us-west-2.compute.amazonaws.com [54.186.198.63]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-441-a2JSz_KeOTmg8-pUeyfoLw-1; Wed, 02 Sep 2026 10:44:31 -0400 X-MC-Unique: a2JSz_KeOTmg8-pUeyfoLw-1 X-Mimecast-MFC-AGG-ID: a2JSz_KeOTmg8-pUeyfoLw_1788360267 Received: from mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com [10.30.177.111]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx-prod-mc-03.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTPS id 1BE781944EBC; Wed, 2 Sep 2026 14:44:24 +0000 (UTC) Received: from wsxc.redhat.com (unknown [10.96.134.11]) by mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTP id 1DCEC1800765; Wed, 2 Sep 2026 14:44:09 +0000 (UTC) From: Ricardo Robaina To: audit@vger.kernel.org, linux-kernel@vger.kernel.org, linux-alpha@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-csky@vger.kernel.org, linux-mips@vger.kernel.org, linux-openrisc@vger.kernel.org, linux-parisc@vger.kernel.org, linux-sh@vger.kernel.org, sparclinux@vger.kernel.org, linux-um@lists.infradead.org, bpf@vger.kernel.org Cc: paul@paul-moore.com, eparis@redhat.com, sgrubb@redhat.com, oleg@redhat.com, richard.henderson@linaro.org, mattst88@gmail.com, linmag7@gmail.com, linux@armlinux.org.uk, catalin.marinas@arm.com, will@kernel.org, guoren@kernel.org, monstr@monstr.eu, tsbogend@alpha.franken.de, jonas@southpole.se, stefan.kristiansson@saunalahti.fi, shorne@gmail.com, James.Bottomley@HansenPartnership.com, deller@gmx.de, ysato@users.sourceforge.jp, dalias@libc.org, glaubitz@physik.fu-berlin.de, davem@davemloft.net, andreas@gaisler.com, richard@nod.at, anton.ivanov@cambridgegreys.com, johannes@sipsolutions.net, chris@zankel.net, jcmvbkbc@gmail.com, tglx@kernel.org, peterz@infradead.org, luto@kernel.org, Ricardo Robaina Subject: [PATCH v2 01/13] audit: log all six syscall arguments in the SYSCALL record Date: Wed, 2 Sep 2026 11:43:34 -0300 Message-ID: In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-Scanned-By: MIMEDefang 3.4.1 on 10.30.177.111 Content-Type: text/plain; charset="utf-8" The SYSCALL record currently logs only four of the six syscall arguments (a0-a3). The remaining two are captured but silently discarded before reaching the audit context. This leads to the need for auxiliary records when audit-relevant data lands in the 5th or 6th argument of a syscall. Extend the SYSCALL record to log all six arguments, by adding arguments a4 and a5 (5th and 6th syscall arguments respectively) inline within the existing record. Also add the two new args to the audit rules switch case, so audit rules can filter on them. Rather than plumbing two more register arguments through every architecture's syscall entry path, change __audit_syscall_entry() to take a pointer to pt_regs and use syscall_get_arguments() to retrieve all six arguments. audit-testsuite# make test audit-testsuite# ausearch -i -m SYSCALL ... type=3DSYSCALL ... syscall=3Dsendto success=3Dyes exit=3D1088 a0=3D0x4 a1=3D0x7ffe43518b60 a2=3D0x440 a3=3D0x0 a4=3D7ffe43518b4c a5=3Dc type=3DSYSCALL ... syscall=3Dopenat2 success=3Dyes exit=3D4 a0=3D0x3 a1=3D0x7fffc74692c8 a2=3D0x7fffc7467390 a3=3D0x18 a4=3D0 a5=3D7fffc74674f8 type=3DSYSCALL ... syscall=3Dopenat success=3Dyes exit=3D3 a0=3DAT_FDCWD a1=3D0x557ced4141a2 a2=3DO_RDWR|O_NONBLOCK a3=3D0x0 a4=3D0 a5=3D0 ... Suggested-by: Will Deacon Link: https://lore.kernel.org/audit/CAHC9VhSjEt_-Bsra4AEqWv+Daw5Ff=3Dgqy7dX= 4Ah11RVhdyCBUQ@mail.gmail.com/T/#t Signed-off-by: Ricardo Robaina --- include/linux/audit.h | 13 ++++--------- include/uapi/linux/audit.h | 2 ++ kernel/audit.h | 2 +- kernel/auditfilter.c | 2 ++ kernel/auditsc.c | 19 ++++++++----------- kernel/entry/syscall-common.c | 4 +--- 6 files changed, 18 insertions(+), 24 deletions(-) diff --git a/include/linux/audit.h b/include/linux/audit.h index 45abb3722d30..9ce5962bc537 100644 --- a/include/linux/audit.h +++ b/include/linux/audit.h @@ -323,8 +323,7 @@ extern int audit_alloc(struct task_struct *task); extern void __audit_free(struct task_struct *task); extern void __audit_uring_entry(u8 op); extern void __audit_uring_exit(int success, long code); -extern void __audit_syscall_entry(int major, unsigned long a0, unsigned lo= ng a1, - unsigned long a2, unsigned long a3); +extern void __audit_syscall_entry(int major, struct pt_regs *regs); extern void __audit_syscall_exit(int ret_success, long ret_value); extern void __audit_getname(struct filename *name); extern void __audit_inode(struct filename *name, const struct dentry *dent= ry, @@ -373,12 +372,10 @@ static inline void audit_uring_exit(int success, long= code) if (unlikely(audit_context())) __audit_uring_exit(success, code); } -static inline void audit_syscall_entry(int major, unsigned long a0, - unsigned long a1, unsigned long a2, - unsigned long a3) +static inline void audit_syscall_entry(int major, struct pt_regs *regs) { if (unlikely(audit_context())) - __audit_syscall_entry(major, a0, a1, a2, a3); + __audit_syscall_entry(major, regs); } static inline void audit_syscall_exit(void *pt_regs) { @@ -611,9 +608,7 @@ static inline void audit_uring_entry(u8 op) { } static inline void audit_uring_exit(int success, long code) { } -static inline void audit_syscall_entry(int major, unsigned long a0, - unsigned long a1, unsigned long a2, - unsigned long a3) +static inline void audit_syscall_entry(int major, struct pt_regs *regs) { } static inline void audit_syscall_exit(void *pt_regs) { } diff --git a/include/uapi/linux/audit.h b/include/uapi/linux/audit.h index e8f5ce677df7..6726059d6df1 100644 --- a/include/uapi/linux/audit.h +++ b/include/uapi/linux/audit.h @@ -303,6 +303,8 @@ #define AUDIT_ARG1 (AUDIT_ARG0+1) #define AUDIT_ARG2 (AUDIT_ARG0+2) #define AUDIT_ARG3 (AUDIT_ARG0+3) +#define AUDIT_ARG4 (AUDIT_ARG0+4) +#define AUDIT_ARG5 (AUDIT_ARG0+5) =20 #define AUDIT_FILTERKEY 210 =20 diff --git a/kernel/audit.h b/kernel/audit.h index 92d5e723d570..83011b14af18 100644 --- a/kernel/audit.h +++ b/kernel/audit.h @@ -117,7 +117,7 @@ struct audit_context { struct audit_stamp stamp; /* event identifier */ int major; /* syscall number */ int uring_op; /* uring operation */ - unsigned long argv[4]; /* syscall arguments */ + unsigned long argv[6]; /* syscall arguments */ long return_code;/* syscall return code */ u64 prio; int return_valid; /* return code is valid */ diff --git a/kernel/auditfilter.c b/kernel/auditfilter.c index f52645625214..cded3696e3c5 100644 --- a/kernel/auditfilter.c +++ b/kernel/auditfilter.c @@ -358,6 +358,8 @@ static int audit_field_valid(struct audit_entry *entry,= struct audit_field *f) case AUDIT_ARG1: case AUDIT_ARG2: case AUDIT_ARG3: + case AUDIT_ARG4: + case AUDIT_ARG5: case AUDIT_PERS: /* */ case AUDIT_DEVMINOR: /* all ops are valid */ diff --git a/kernel/auditsc.c b/kernel/auditsc.c index 2b9ce0b52511..cf45c782b03d 100644 --- a/kernel/auditsc.c +++ b/kernel/auditsc.c @@ -728,6 +728,8 @@ static int audit_filter_rules(struct task_struct *tsk, case AUDIT_ARG1: case AUDIT_ARG2: case AUDIT_ARG3: + case AUDIT_ARG4: + case AUDIT_ARG5: if (ctx) result =3D audit_comparator(ctx->argv[f->type-AUDIT_ARG0], f->op, f->v= al); break; @@ -1674,11 +1676,13 @@ static void audit_log_exit(void) AUDITSC_SUCCESS), context->return_code); audit_log_format(ab, - " a0=3D%lx a1=3D%lx a2=3D%lx a3=3D%lx items=3D%d", + " a0=3D%lx a1=3D%lx a2=3D%lx a3=3D%lx a4=3D%lx a5=3D%lx items=3D%d", context->argv[0], context->argv[1], context->argv[2], context->argv[3], + context->argv[4], + context->argv[5], context->name_count); audit_log_task_info(ab); audit_log_key(ab, context->filterkey); @@ -1970,10 +1974,7 @@ void __audit_uring_exit(int success, long code) /** * __audit_syscall_entry - fill in an audit record at syscall entry * @major: major syscall type (function) - * @a1: additional syscall register 1 - * @a2: additional syscall register 2 - * @a3: additional syscall register 3 - * @a4: additional syscall register 4 + * @regs: the task's register state at syscall entry * * Fill in audit context at syscall entry. This only happens if the * audit context was created when the task was created and the state or @@ -1983,8 +1984,7 @@ void __audit_uring_exit(int success, long code) * will only be written if another part of the kernel requests that it * be written). */ -void __audit_syscall_entry(int major, unsigned long a1, unsigned long a2, - unsigned long a3, unsigned long a4) +void __audit_syscall_entry(int major, struct pt_regs *regs) { struct audit_context *context =3D audit_context(); enum audit_state state; @@ -2012,10 +2012,7 @@ void __audit_syscall_entry(int major, unsigned long = a1, unsigned long a2, =20 context->arch =3D syscall_get_arch(current); context->major =3D major; - context->argv[0] =3D a1; - context->argv[1] =3D a2; - context->argv[2] =3D a3; - context->argv[3] =3D a4; + syscall_get_arguments(current, regs, context->argv); context->context =3D AUDIT_CTX_SYSCALL; context->current_state =3D state; ktime_get_coarse_real_ts64(&context->stamp.ctime); diff --git a/kernel/entry/syscall-common.c b/kernel/entry/syscall-common.c index b8eac9efb6fd..471db2a8e09d 100644 --- a/kernel/entry/syscall-common.c +++ b/kernel/entry/syscall-common.c @@ -22,9 +22,7 @@ void trace_syscall_exit(struct pt_regs *regs, long ret) void syscall_enter_audit(struct pt_regs *regs) { long syscall =3D syscall_get_nr(current, regs); - unsigned long args[6]; =20 - syscall_get_arguments(current, regs, args); - __audit_syscall_entry(syscall, args[0], args[1], args[2], args[3]); + __audit_syscall_entry(syscall, regs); } #endif --=20 2.55.0 From nobody Sat Sep 26 10:01:17 2026 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id AC8B84A3D39 for ; Wed, 2 Sep 2026 14:44:49 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=170.10.129.124 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360292; cv=none; b=U4X4e3bV9lMKEp7Vf58yypvJk2liddttw/k8hbhqd7fVNlKW3+ml8k6A8KNSwf7kQff2H8rRHA6KLFky8xJTDOGFZeWf0iIDpgirEwEqvFqWQeBOTDATJpe1V5Tg3jbyePzI5JW0m6ube2TYKTZpMR98GGagB+7oIVJbCQ3g8zs= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360292; c=relaxed/simple; bh=viHpp99FKRJsQc5vLWyWAYVcO2oZKVIY6BDS2Ha0zlU=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=Nd9KzU3Uqszt/gpnOXKW60yBnyVOqaQVHrIUcGGGxvcGL/8dccNIdBwgeD+NCBX7dazpCnnyeDhXO1DTbMQ7WNKuwpSKJ8bXVV/WniQ5tB5/Dv4TKpLE25Px1TnCrKWkLN+O1SMn45vkHxLVhkBFMu9viR86BsrUrIf3TKovuSQ= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com; spf=pass smtp.mailfrom=redhat.com; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b=XiJ5i0UT; arc=none smtp.client-ip=170.10.129.124 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=redhat.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b="XiJ5i0UT" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1788360288; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=WqVatm7SO4RAJULUJ3fy6bXN1Cic9NEzCojra3OqLQ8=; b=XiJ5i0UT3Cm5ILiT214sumHONfg1gDTtUq+9qBZK7jSL1njFlGpDJtdIhYyEjCK12Af7vJ niLM0cEKhNXxBFobUfT67Iuu4jr/VQa5aj91bWMCGobmLH5i8rzhKKCfiOVf1waFTzUBTK E7e1MalIqh/18G4yMG2l3vEe8F8T6bs= Received: from mx-prod-mc-05.mail-002.prod.us-west-2.aws.redhat.com (ec2-54-186-198-63.us-west-2.compute.amazonaws.com [54.186.198.63]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-649-tj9F9GjaP92Ad6IHG9-Djw-1; Wed, 02 Sep 2026 10:44:45 -0400 X-MC-Unique: tj9F9GjaP92Ad6IHG9-Djw-1 X-Mimecast-MFC-AGG-ID: tj9F9GjaP92Ad6IHG9-Djw_1788360281 Received: from mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com [10.30.177.111]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx-prod-mc-05.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTPS id 5BBAB1954AE4; Wed, 2 Sep 2026 14:44:39 +0000 (UTC) Received: from wsxc.redhat.com (unknown [10.96.134.11]) by mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTP id 8FCB81800643; Wed, 2 Sep 2026 14:44:24 +0000 (UTC) From: Ricardo Robaina To: audit@vger.kernel.org, linux-kernel@vger.kernel.org, linux-alpha@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-csky@vger.kernel.org, linux-mips@vger.kernel.org, linux-openrisc@vger.kernel.org, linux-parisc@vger.kernel.org, linux-sh@vger.kernel.org, sparclinux@vger.kernel.org, linux-um@lists.infradead.org, bpf@vger.kernel.org Cc: paul@paul-moore.com, eparis@redhat.com, sgrubb@redhat.com, oleg@redhat.com, richard.henderson@linaro.org, mattst88@gmail.com, linmag7@gmail.com, linux@armlinux.org.uk, catalin.marinas@arm.com, will@kernel.org, guoren@kernel.org, monstr@monstr.eu, tsbogend@alpha.franken.de, jonas@southpole.se, stefan.kristiansson@saunalahti.fi, shorne@gmail.com, James.Bottomley@HansenPartnership.com, deller@gmx.de, ysato@users.sourceforge.jp, dalias@libc.org, glaubitz@physik.fu-berlin.de, davem@davemloft.net, andreas@gaisler.com, richard@nod.at, anton.ivanov@cambridgegreys.com, johannes@sipsolutions.net, chris@zankel.net, jcmvbkbc@gmail.com, tglx@kernel.org, peterz@infradead.org, luto@kernel.org, Ricardo Robaina Subject: [PATCH v2 02/13] alpha: pass pt_regs to audit_syscall_entry() Date: Wed, 2 Sep 2026 11:43:35 -0300 Message-ID: <4ada9fcbb93af8d5c1c9bfe2c83d94fc10bfe327.1788351089.git.rrobaina@redhat.com> In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-Scanned-By: MIMEDefang 3.4.1 on 10.30.177.111 Content-Type: text/plain; charset="utf-8" audit_syscall_entry() now takes a pointer to pt_regs and extracts the syscall arguments itself via syscall_get_arguments(). Drop the individual argument registers from the call and pass regs instead. Signed-off-by: Ricardo Robaina --- arch/alpha/kernel/ptrace.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/arch/alpha/kernel/ptrace.c b/arch/alpha/kernel/ptrace.c index fc8f6cedbb28..8a39c0473297 100644 --- a/arch/alpha/kernel/ptrace.c +++ b/arch/alpha/kernel/ptrace.c @@ -496,8 +496,7 @@ asmlinkage unsigned long syscall_trace_enter(void) } =20 #ifdef CONFIG_AUDITSYSCALL - audit_syscall_entry(syscall_get_nr(current, regs), - regs->r16, regs->r17, regs->r18, regs->r19); + audit_syscall_entry(syscall_get_nr(current, regs), regs); #endif return syscall_get_nr(current, regs); } --=20 2.55.0 From nobody Sat Sep 26 10:01:17 2026 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id B65CE47CC75 for ; Wed, 2 Sep 2026 14:45:03 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=170.10.133.124 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360306; cv=none; b=Qi8xWO5DBAAJsTKcQW9sacnJMKypVgL1xazmR/XG3k6Sw4YxezAOpvSDN70Lz4TOS9wDhP1egbH3/HFSK9ZAFLY2cWojq6zL8NIxRhX5CGuQsb5kwCiRhwFpKNaARaGo0qC+ca/paCwVqnxf/nVii8GTZRl8Z6QU4SX5hKfWa5E= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360306; c=relaxed/simple; bh=4n+0+5i30Q5tAHEJnQORXuPv5JKrVny4oORcMMejxfQ=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=fDuppkuzrZ9MWawH/ZbbazuIpDFckMnALJMo/US6QEBfib7V1UMN7yibFQveC5oRZyk/MkjQjfCCOJh1GgLl1Dl2TJKO05ucDk9gOnei5r0epYlgN5WuSChSCqNYwAHnwh27KDc14eOfRWYgg4mF0QW0rRk9VyJjLP5TkHaTsuM= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com; spf=pass smtp.mailfrom=redhat.com; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b=NQDJ/Zs4; arc=none smtp.client-ip=170.10.133.124 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=redhat.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b="NQDJ/Zs4" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1788360302; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=bIvLvNjfFpHlzvcj5ekjg7l2b7htCeRUTqEEz8CXAmk=; b=NQDJ/Zs4tYyXR8UPGl6Pa9+mXqXXJLEZ1j7aBJSAQZ0WJ23FzzyZ/FceXxRtHPNvEXB+T2 96twAcgu1cCu5Yfh6J8GUt7n5MdRhYdYcUEutxFWn5dTiP6yJosZvlhVK6UyIMia0YbhDG B4GjLUWZYB9rkKf9Ukgq81I2Ys/zxF0= Received: from mx-prod-mc-03.mail-002.prod.us-west-2.aws.redhat.com (ec2-54-186-198-63.us-west-2.compute.amazonaws.com [54.186.198.63]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-510--6trhLijN-alxn-pagj6FA-1; Wed, 02 Sep 2026 10:44:59 -0400 X-MC-Unique: -6trhLijN-alxn-pagj6FA-1 X-Mimecast-MFC-AGG-ID: -6trhLijN-alxn-pagj6FA_1788360294 Received: from mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com [10.30.177.111]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx-prod-mc-03.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTPS id 4EB50192DD59; Wed, 2 Sep 2026 14:44:53 +0000 (UTC) Received: from wsxc.redhat.com (unknown [10.96.134.11]) by mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTP id CF44E1800644; Wed, 2 Sep 2026 14:44:39 +0000 (UTC) From: Ricardo Robaina To: audit@vger.kernel.org, linux-kernel@vger.kernel.org, linux-alpha@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-csky@vger.kernel.org, linux-mips@vger.kernel.org, linux-openrisc@vger.kernel.org, linux-parisc@vger.kernel.org, linux-sh@vger.kernel.org, sparclinux@vger.kernel.org, linux-um@lists.infradead.org, bpf@vger.kernel.org Cc: paul@paul-moore.com, eparis@redhat.com, sgrubb@redhat.com, oleg@redhat.com, richard.henderson@linaro.org, mattst88@gmail.com, linmag7@gmail.com, linux@armlinux.org.uk, catalin.marinas@arm.com, will@kernel.org, guoren@kernel.org, monstr@monstr.eu, tsbogend@alpha.franken.de, jonas@southpole.se, stefan.kristiansson@saunalahti.fi, shorne@gmail.com, James.Bottomley@HansenPartnership.com, deller@gmx.de, ysato@users.sourceforge.jp, dalias@libc.org, glaubitz@physik.fu-berlin.de, davem@davemloft.net, andreas@gaisler.com, richard@nod.at, anton.ivanov@cambridgegreys.com, johannes@sipsolutions.net, chris@zankel.net, jcmvbkbc@gmail.com, tglx@kernel.org, peterz@infradead.org, luto@kernel.org, Ricardo Robaina Subject: [PATCH v2 03/13] arm: pass pt_regs to audit_syscall_entry() Date: Wed, 2 Sep 2026 11:43:36 -0300 Message-ID: In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-Scanned-By: MIMEDefang 3.4.1 on 10.30.177.111 Content-Type: text/plain; charset="utf-8" audit_syscall_entry() now takes a pointer to pt_regs and extracts the syscall arguments itself via syscall_get_arguments(). Drop the individual argument registers from the call and pass regs instead. Signed-off-by: Ricardo Robaina --- arch/arm/kernel/ptrace.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/arch/arm/kernel/ptrace.c b/arch/arm/kernel/ptrace.c index ed7a2a87a670..e103ec2661cd 100644 --- a/arch/arm/kernel/ptrace.c +++ b/arch/arm/kernel/ptrace.c @@ -868,8 +868,7 @@ asmlinkage int syscall_trace_enter(struct pt_regs *regs) if (test_thread_flag(TIF_SYSCALL_TRACEPOINT)) trace_sys_enter(regs, scno); =20 - audit_syscall_entry(scno, regs->ARM_r0, regs->ARM_r1, regs->ARM_r2, - regs->ARM_r3); + audit_syscall_entry(scno, regs); =20 return scno; } --=20 2.55.0 From nobody Sat Sep 26 10:01:17 2026 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 5923349E5E9 for ; Wed, 2 Sep 2026 14:45:19 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=170.10.129.124 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360321; cv=none; b=ED0/CFwUnCZavX8B+m35tiFh4KoHlqjAxmzcYyJCQqCQTj2dk7oyKSiZXsstdsXLOMNpUljrwtLe4vkIRbsogmHhd9BOj8cGzsl+v2BzImQfUs4v704aXJ1IJY8P8jGE9XnYH/xuPPj3FtbRbXGJQV1bZRt+LzgPUbgepwhcLLU= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360321; c=relaxed/simple; bh=9GeWUP82q+/B9JJxMUYt+IHDDJj6ypaoMuCaHgdv5IQ=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=fKUv4EHZwqL2QflZ3JamysWboizaJ4z+GSrQ2S+ADb4+UVDn51bUdGQdnfjapBmza4+xIi6/H2XpB/Td+02dnPXYc0WP/sDekUPzyN1mw+6yCZExbgxC256KcaPoYQMpOIw0otmSIHvvmTKE+eVrHe7egW7BbGzAGpO4dFC2SqE= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com; spf=pass smtp.mailfrom=redhat.com; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b=V0ozld28; arc=none smtp.client-ip=170.10.129.124 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=redhat.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b="V0ozld28" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1788360318; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=vE1P/olvp3+bKqpzcnfp1l9GInHg3ox03H37VJYA0pc=; b=V0ozld282fGaH5aytnLyagzOqhqFCp+ppOgtVUaeQLS6YTuFV2DcYXovbvypQXmRdklBXu dqWJ1i2RubRNxUwT1HOmfeeavrmYdrQ+KWjV/KeVOe1NEskIOze4hR8Fnc3+Gx44ntMrck 63v5YcJBTTETVHTrfg0451yF2LafARQ= Received: from mx-prod-mc-05.mail-002.prod.us-west-2.aws.redhat.com (ec2-54-186-198-63.us-west-2.compute.amazonaws.com [54.186.198.63]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-625-DkV1fo4oOi-hNmkoEOv3GQ-1; Wed, 02 Sep 2026 10:45:14 -0400 X-MC-Unique: DkV1fo4oOi-hNmkoEOv3GQ-1 X-Mimecast-MFC-AGG-ID: DkV1fo4oOi-hNmkoEOv3GQ_1788360307 Received: from mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com [10.30.177.111]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx-prod-mc-05.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTPS id 3CFE2195E93E; Wed, 2 Sep 2026 14:45:06 +0000 (UTC) Received: from wsxc.redhat.com (unknown [10.96.134.11]) by mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTP id D5E981800642; Wed, 2 Sep 2026 14:44:53 +0000 (UTC) From: Ricardo Robaina To: audit@vger.kernel.org, linux-kernel@vger.kernel.org, linux-alpha@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-csky@vger.kernel.org, linux-mips@vger.kernel.org, linux-openrisc@vger.kernel.org, linux-parisc@vger.kernel.org, linux-sh@vger.kernel.org, sparclinux@vger.kernel.org, linux-um@lists.infradead.org, bpf@vger.kernel.org Cc: paul@paul-moore.com, eparis@redhat.com, sgrubb@redhat.com, oleg@redhat.com, richard.henderson@linaro.org, mattst88@gmail.com, linmag7@gmail.com, linux@armlinux.org.uk, catalin.marinas@arm.com, will@kernel.org, guoren@kernel.org, monstr@monstr.eu, tsbogend@alpha.franken.de, jonas@southpole.se, stefan.kristiansson@saunalahti.fi, shorne@gmail.com, James.Bottomley@HansenPartnership.com, deller@gmx.de, ysato@users.sourceforge.jp, dalias@libc.org, glaubitz@physik.fu-berlin.de, davem@davemloft.net, andreas@gaisler.com, richard@nod.at, anton.ivanov@cambridgegreys.com, johannes@sipsolutions.net, chris@zankel.net, jcmvbkbc@gmail.com, tglx@kernel.org, peterz@infradead.org, luto@kernel.org, Ricardo Robaina Subject: [PATCH v2 04/13] arm64: pass pt_regs to audit_syscall_entry() Date: Wed, 2 Sep 2026 11:43:37 -0300 Message-ID: In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-Scanned-By: MIMEDefang 3.4.1 on 10.30.177.111 Content-Type: text/plain; charset="utf-8" audit_syscall_entry() now takes a pointer to pt_regs and extracts the syscall arguments itself via syscall_get_arguments(). Drop the individual argument registers from the call and pass regs instead. Signed-off-by: Ricardo Robaina Acked-by: Will Deacon --- arch/arm64/kernel/ptrace.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/arch/arm64/kernel/ptrace.c b/arch/arm64/kernel/ptrace.c index f743cbec1c3a..65532b2a8cd4 100644 --- a/arch/arm64/kernel/ptrace.c +++ b/arch/arm64/kernel/ptrace.c @@ -2476,8 +2476,7 @@ int syscall_trace_enter(struct pt_regs *regs) if (test_thread_flag(TIF_SYSCALL_TRACEPOINT)) trace_sys_enter(regs, regs->syscallno); =20 - audit_syscall_entry(regs->syscallno, regs->orig_x0, regs->regs[1], - regs->regs[2], regs->regs[3]); + audit_syscall_entry(regs->syscallno, regs); =20 return regs->syscallno; } --=20 2.55.0 From nobody Sat Sep 26 10:01:17 2026 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id AA3464A43FD for ; Wed, 2 Sep 2026 14:45:31 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=170.10.129.124 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360334; cv=none; b=BeuPJqWHWua2nhAjh3WxX5YTDK1R/m0uezQBocBVOsZ5RK+XeYY+jEZfopo8XfE0utZDvBKUY/itb3FE1gTP6x4bgwzI8fKofFnctfzyIT7O0RgzMO6hEtWHBmQkpGxfcNFs6TpGo2/ou8Jz8rf+0RR6vmnOZ8fQxCgoBvM+bT8= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360334; c=relaxed/simple; bh=jq17hbYLb63begqUlax0zfoLb1QS8lLPBPIiPSa6mk8=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=Gm+fEna2QSiVseOd2WFyktSU2rRGFJjY69ZFk+NcJqaMOMCkuQGINA5d9M173tOtIbJtoMA5r4pUsaQjdjRj8WInaNm7l75hJdBfFL62Wm3yHtwKFBCgFSo5tRPc2tKEma9HWSEXK4zCVOOmFyclmaq+iHNawxLyJZ6BJOYREkc= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com; spf=pass smtp.mailfrom=redhat.com; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b=QNVx5bLF; arc=none smtp.client-ip=170.10.129.124 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=redhat.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b="QNVx5bLF" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1788360329; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=iMrptk4mqYOQP3eWTGD3d/U/K/Lln3cM3PUoSH99Zx0=; b=QNVx5bLFuyU5tvUcIBn+XM5CNhOaZqtA47hye6QvkzZnhRGFZYVyD3CYHFE8CRdVz9iHlF MJPK6cSIHKtEcmUbygoHej0FcJUMK1FIPr15EuYq7dJoFAeQS5fV7uYyH8X75JbX4mBK2G AYxShDdNllDnniDt9WvBmCATi6rDpnA= Received: from mx-prod-mc-01.mail-002.prod.us-west-2.aws.redhat.com (ec2-54-186-198-63.us-west-2.compute.amazonaws.com [54.186.198.63]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-199-U63W3z6YNve8UdxmLpajGg-1; Wed, 02 Sep 2026 10:45:24 -0400 X-MC-Unique: U63W3z6YNve8UdxmLpajGg-1 X-Mimecast-MFC-AGG-ID: U63W3z6YNve8UdxmLpajGg_1788360320 Received: from mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com [10.30.177.111]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx-prod-mc-01.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTPS id 9B785195D03D; Wed, 2 Sep 2026 14:45:19 +0000 (UTC) Received: from wsxc.redhat.com (unknown [10.96.134.11]) by mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTP id B17831800641; Wed, 2 Sep 2026 14:45:06 +0000 (UTC) From: Ricardo Robaina To: audit@vger.kernel.org, linux-kernel@vger.kernel.org, linux-alpha@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-csky@vger.kernel.org, linux-mips@vger.kernel.org, linux-openrisc@vger.kernel.org, linux-parisc@vger.kernel.org, linux-sh@vger.kernel.org, sparclinux@vger.kernel.org, linux-um@lists.infradead.org, bpf@vger.kernel.org Cc: paul@paul-moore.com, eparis@redhat.com, sgrubb@redhat.com, oleg@redhat.com, richard.henderson@linaro.org, mattst88@gmail.com, linmag7@gmail.com, linux@armlinux.org.uk, catalin.marinas@arm.com, will@kernel.org, guoren@kernel.org, monstr@monstr.eu, tsbogend@alpha.franken.de, jonas@southpole.se, stefan.kristiansson@saunalahti.fi, shorne@gmail.com, James.Bottomley@HansenPartnership.com, deller@gmx.de, ysato@users.sourceforge.jp, dalias@libc.org, glaubitz@physik.fu-berlin.de, davem@davemloft.net, andreas@gaisler.com, richard@nod.at, anton.ivanov@cambridgegreys.com, johannes@sipsolutions.net, chris@zankel.net, jcmvbkbc@gmail.com, tglx@kernel.org, peterz@infradead.org, luto@kernel.org, Ricardo Robaina Subject: [PATCH v2 05/13] csky: pass pt_regs to audit_syscall_entry() Date: Wed, 2 Sep 2026 11:43:38 -0300 Message-ID: <83f97472fb90a20f84892b6686c2158027c3e06c.1788351089.git.rrobaina@redhat.com> In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-Scanned-By: MIMEDefang 3.4.1 on 10.30.177.111 Content-Type: text/plain; charset="utf-8" audit_syscall_entry() now takes a pointer to pt_regs and extracts the syscall arguments itself via syscall_get_arguments(). Drop the individual argument registers from the call and pass regs instead. Signed-off-by: Ricardo Robaina --- arch/csky/kernel/ptrace.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/arch/csky/kernel/ptrace.c b/arch/csky/kernel/ptrace.c index ee2867a1576e..5c3051bcd78c 100644 --- a/arch/csky/kernel/ptrace.c +++ b/arch/csky/kernel/ptrace.c @@ -329,7 +329,7 @@ asmlinkage int syscall_trace_enter(struct pt_regs *regs) if (test_thread_flag(TIF_SYSCALL_TRACEPOINT)) trace_sys_enter(regs, syscall_get_nr(current, regs)); =20 - audit_syscall_entry(regs_syscallid(regs), regs->a0, regs->a1, regs->a2, r= egs->a3); + audit_syscall_entry(regs_syscallid(regs), regs); return 0; } =20 --=20 2.55.0 From nobody Sat Sep 26 10:01:17 2026 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 235A04A3F24 for ; Wed, 2 Sep 2026 14:45:49 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=170.10.133.124 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360352; cv=none; b=j3wJqPFwUnDbdDMdp9rkpwLsU0gddLUPVLgMyMsn2WsUJLRX1wChwFfQSTmtlVKzqh4Q/plU2j1bQd6ZtFv5hE/E5Ry6RJxpzdRezCZRgRp1e1Rn3VgLqt57b8o7ZnZ9egc6dyhbeCTVwASvTHJqEEWd/SnLHcCFLg496FoExt0= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360352; c=relaxed/simple; bh=8/GCA5LAxIagEVqfPnhqTs8UinXTcTM+5JmGK586QT4=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=RBupzdyl0Gi+KocQJ4maYhHWfmCzSN0+FtYcMWF8UiAL3AyMQQy+lw4VmogRTHip71rLOwlIrlzQ2zn6gl2fUHSairn7GGwAzA0uHLZeGQJwoAaQ9MKmlc0Nv67rvk5Fow5xXyQacyzVqqwI9fJHbTYZMxvCSQMyk7HJwG576lI= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com; spf=pass smtp.mailfrom=redhat.com; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b=cj+0Vv+y; arc=none smtp.client-ip=170.10.133.124 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=redhat.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b="cj+0Vv+y" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1788360349; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=ItBk91wHSYNF8sJoVrRHTmXutoGVHgHWsPITNC9iFGU=; b=cj+0Vv+yj0rv3PN+9BWJNsU2BoClee2ZD7ep4tBSfr5W8wWeC3dk/bZnjlhYJKP7aU3mlF cHPo/IzDe1iCEYDYQJNItmhiylNQb2PkXMexkweUzgftnHG9PtJq5mzD3GfFUS4ggNxkxu 3CB81A9vpFt4GTdLKnOMgkktadx1Ms4= Received: from mx-prod-mc-08.mail-002.prod.us-west-2.aws.redhat.com (ec2-35-165-154-97.us-west-2.compute.amazonaws.com [35.165.154.97]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-358-u0gr6a0fMcKlIaVx4XlB8Q-1; Wed, 02 Sep 2026 10:45:45 -0400 X-MC-Unique: u0gr6a0fMcKlIaVx4XlB8Q-1 X-Mimecast-MFC-AGG-ID: u0gr6a0fMcKlIaVx4XlB8Q_1788360334 Received: from mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com [10.30.177.111]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx-prod-mc-08.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTPS id 1DB4F18512F5; Wed, 2 Sep 2026 14:45:33 +0000 (UTC) Received: from wsxc.redhat.com (unknown [10.96.134.11]) by mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTP id 1B99D1800641; Wed, 2 Sep 2026 14:45:19 +0000 (UTC) From: Ricardo Robaina To: audit@vger.kernel.org, linux-kernel@vger.kernel.org, linux-alpha@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-csky@vger.kernel.org, linux-mips@vger.kernel.org, linux-openrisc@vger.kernel.org, linux-parisc@vger.kernel.org, linux-sh@vger.kernel.org, sparclinux@vger.kernel.org, linux-um@lists.infradead.org, bpf@vger.kernel.org Cc: paul@paul-moore.com, eparis@redhat.com, sgrubb@redhat.com, oleg@redhat.com, richard.henderson@linaro.org, mattst88@gmail.com, linmag7@gmail.com, linux@armlinux.org.uk, catalin.marinas@arm.com, will@kernel.org, guoren@kernel.org, monstr@monstr.eu, tsbogend@alpha.franken.de, jonas@southpole.se, stefan.kristiansson@saunalahti.fi, shorne@gmail.com, James.Bottomley@HansenPartnership.com, deller@gmx.de, ysato@users.sourceforge.jp, dalias@libc.org, glaubitz@physik.fu-berlin.de, davem@davemloft.net, andreas@gaisler.com, richard@nod.at, anton.ivanov@cambridgegreys.com, johannes@sipsolutions.net, chris@zankel.net, jcmvbkbc@gmail.com, tglx@kernel.org, peterz@infradead.org, luto@kernel.org, Ricardo Robaina Subject: [PATCH v2 06/13] microblaze: pass pt_regs to audit_syscall_entry() Date: Wed, 2 Sep 2026 11:43:39 -0300 Message-ID: <185aac22d5afd79ef50f170332a1a808ff0a5b0d.1788351089.git.rrobaina@redhat.com> In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-Scanned-By: MIMEDefang 3.4.1 on 10.30.177.111 Content-Type: text/plain; charset="utf-8" audit_syscall_entry() now takes a pointer to pt_regs and extracts the syscall arguments itself via syscall_get_arguments(). Drop the individual argument registers from the call and pass regs instead. Signed-off-by: Ricardo Robaina --- arch/microblaze/kernel/ptrace.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/arch/microblaze/kernel/ptrace.c b/arch/microblaze/kernel/ptrac= e.c index 236264e932d6..5fe9e3a150f4 100644 --- a/arch/microblaze/kernel/ptrace.c +++ b/arch/microblaze/kernel/ptrace.c @@ -147,7 +147,7 @@ asmlinkage unsigned long do_syscall_trace_enter(struct = pt_regs *regs) */ ret =3D -1L; =20 - audit_syscall_entry(regs->r12, regs->r5, regs->r6, regs->r7, regs->r8); + audit_syscall_entry(regs->r12, regs); =20 return ret ?: regs->r12; } --=20 2.55.0 From nobody Sat Sep 26 10:01:17 2026 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 250494A485B for ; Wed, 2 Sep 2026 14:45:54 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=170.10.129.124 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360355; cv=none; b=F1yuS6okYnbop/bBllNGJ/xVuH8Yo5DuOJ6iT3xAo4qP822aJDYte41AjG/mK0FN48/uXyH0y4HQm1KmzgpZM/ly6tqreDOi82yciraK+n/XHiw1SY8fVXuhX7f/lZsbhQ+O3GUT4iqHRwArQaarwEWfWVU6bFrMwc9UzxpxXOk= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360355; c=relaxed/simple; bh=pSOOTYA1PnB0eQIBmyoqEag46PJtYb2GNPANAOhFQ3k=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=WqY/zq8s+wgodlL50B4DckJlen3jBONNNhl2zH3fkQRTssxymZUTgNQrWl4BVJMWepnx7gaHX1ZpjOtGMjCkrErDRPW4rRseVDUXJshmUwt1+5Cj993hgWBmXekOQPNibEDrhiBPyXzb53VHLCKIzM7FWZs7EYAmSv1Elg+n25o= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com; spf=pass smtp.mailfrom=redhat.com; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b=azPh7Z22; arc=none smtp.client-ip=170.10.129.124 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=redhat.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b="azPh7Z22" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1788360353; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=3jzmBjzGkcUWIV8+PXpCllBMS71YAnuNqy8uXQRSDk8=; b=azPh7Z22T99EjG8i7Pjoq/nSKYtKhUXM/VwDw1fpVD9zAWTcwUjxOmmY6DNX3IVEkdpvyh Zd/uNiNjE6QtSCz6fUqmHGUBmPQkdCS3taWjYZEc6o7w7UUNLyPbHC7LUraFwn9i/rbZSu IPU4yaq/gCMAFNzBeWwTjUVJXKvOWn8= Received: from mx-prod-mc-08.mail-002.prod.us-west-2.aws.redhat.com (ec2-35-165-154-97.us-west-2.compute.amazonaws.com [35.165.154.97]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-125-qp2Fhcg8PhKkCoXXpnbxsg-1; Wed, 02 Sep 2026 10:45:50 -0400 X-MC-Unique: qp2Fhcg8PhKkCoXXpnbxsg-1 X-Mimecast-MFC-AGG-ID: qp2Fhcg8PhKkCoXXpnbxsg_1788360346 Received: from mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com [10.30.177.111]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx-prod-mc-08.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTPS id 96CCF184BA87; Wed, 2 Sep 2026 14:45:45 +0000 (UTC) Received: from wsxc.redhat.com (unknown [10.96.134.11]) by mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTP id 939571800642; Wed, 2 Sep 2026 14:45:33 +0000 (UTC) From: Ricardo Robaina To: audit@vger.kernel.org, linux-kernel@vger.kernel.org, linux-alpha@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-csky@vger.kernel.org, linux-mips@vger.kernel.org, linux-openrisc@vger.kernel.org, linux-parisc@vger.kernel.org, linux-sh@vger.kernel.org, sparclinux@vger.kernel.org, linux-um@lists.infradead.org, bpf@vger.kernel.org Cc: paul@paul-moore.com, eparis@redhat.com, sgrubb@redhat.com, oleg@redhat.com, richard.henderson@linaro.org, mattst88@gmail.com, linmag7@gmail.com, linux@armlinux.org.uk, catalin.marinas@arm.com, will@kernel.org, guoren@kernel.org, monstr@monstr.eu, tsbogend@alpha.franken.de, jonas@southpole.se, stefan.kristiansson@saunalahti.fi, shorne@gmail.com, James.Bottomley@HansenPartnership.com, deller@gmx.de, ysato@users.sourceforge.jp, dalias@libc.org, glaubitz@physik.fu-berlin.de, davem@davemloft.net, andreas@gaisler.com, richard@nod.at, anton.ivanov@cambridgegreys.com, johannes@sipsolutions.net, chris@zankel.net, jcmvbkbc@gmail.com, tglx@kernel.org, peterz@infradead.org, luto@kernel.org, Ricardo Robaina Subject: [PATCH v2 07/13] mips: pass pt_regs to audit_syscall_entry() Date: Wed, 2 Sep 2026 11:43:40 -0300 Message-ID: <153ece40b540f100ab436549b8e5819d52cd4f92.1788351089.git.rrobaina@redhat.com> In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-Scanned-By: MIMEDefang 3.4.1 on 10.30.177.111 Content-Type: text/plain; charset="utf-8" audit_syscall_entry() now takes a pointer to pt_regs and extracts the syscall arguments itself via syscall_get_arguments(). Drop the individual argument registers from the call and pass regs instead. Signed-off-by: Ricardo Robaina --- arch/mips/kernel/ptrace.c | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/arch/mips/kernel/ptrace.c b/arch/mips/kernel/ptrace.c index 17dc7249b8ca..7a09b4671a54 100644 --- a/arch/mips/kernel/ptrace.c +++ b/arch/mips/kernel/ptrace.c @@ -1338,9 +1338,7 @@ asmlinkage long syscall_trace_enter(struct pt_regs *r= egs) if (unlikely(test_thread_flag(TIF_SYSCALL_TRACEPOINT))) trace_sys_enter(regs, regs->regs[2]); =20 - audit_syscall_entry(current_thread_info()->syscall, - regs->regs[4], regs->regs[5], - regs->regs[6], regs->regs[7]); + audit_syscall_entry(current_thread_info()->syscall, regs); =20 /* * Negative syscall numbers are mistaken for rejected syscalls, but --=20 2.55.0 From nobody Sat Sep 26 10:01:17 2026 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 94C834A4822 for ; Wed, 2 Sep 2026 14:46:08 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=170.10.133.124 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360371; cv=none; b=un6T0dHaDzDljf0SmpYTDJBIXGaGcXo5Hzj63/+U9A3y3CHjH7gUXfZ8AlWmAVH1O6BRf1HIX/c6+KUqGhFiwpWCCxhYf73kbYIz1hXnSoEC85sYiXebjHM0sUt2Rbx8mEjCdZpL890NCl+TXQ7mKNmrbqv7jPYbYQTOkXM/BQA= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360371; c=relaxed/simple; bh=CCNONiB3FTFvhm2CZakx4OhF7akkV8b86dwa+v6Vp7Q=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=mqQbsnugAyJ4V/vD1h6TxXvaUrafPZjyDUbtBw49oOC02rgpsgze2DhbwC9idYOFZwrT+MQdJHjMDGiqIC3zbPXd8lR7PHay+GaiZUSJFO8sKQhB0f8LfwxOflsq5qkFz75bUGPKl3KTTGoO9E8sNL8p6LCyAOJQOJfvNxO9qv8= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com; spf=pass smtp.mailfrom=redhat.com; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b=Qx4i9kQ7; arc=none smtp.client-ip=170.10.133.124 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=redhat.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b="Qx4i9kQ7" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1788360367; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=rvbxpjMAQjSj/LINaSUWjfJ/DSqjHqJ5bhFD9zr5Fzk=; b=Qx4i9kQ7Y0qAtO9jdZQfmfqtbvNAxCzt0GFsxN5BQve0Y9bTVOqEotfb/crli4e9DrZ6A0 3x3HKMBf+KE/HE9OUcLhnvlOmbkH12EwAB87FVKYMksWVsyvrLpEvHWK8aeLOESfE6wryh rLcs0Zm+dSSocOmuy1WydUHZuAvbq64= Received: from mx-prod-mc-03.mail-002.prod.us-west-2.aws.redhat.com (ec2-54-186-198-63.us-west-2.compute.amazonaws.com [54.186.198.63]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-120-prpdUxWTOB2NTILg9_DtWg-1; Wed, 02 Sep 2026 10:46:03 -0400 X-MC-Unique: prpdUxWTOB2NTILg9_DtWg-1 X-Mimecast-MFC-AGG-ID: prpdUxWTOB2NTILg9_DtWg_1788360358 Received: from mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com [10.30.177.111]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx-prod-mc-03.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTPS id DA6641955D99; Wed, 2 Sep 2026 14:45:57 +0000 (UTC) Received: from wsxc.redhat.com (unknown [10.96.134.11]) by mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTP id 156A61801AEA; Wed, 2 Sep 2026 14:45:45 +0000 (UTC) From: Ricardo Robaina To: audit@vger.kernel.org, linux-kernel@vger.kernel.org, linux-alpha@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-csky@vger.kernel.org, linux-mips@vger.kernel.org, linux-openrisc@vger.kernel.org, linux-parisc@vger.kernel.org, linux-sh@vger.kernel.org, sparclinux@vger.kernel.org, linux-um@lists.infradead.org, bpf@vger.kernel.org Cc: paul@paul-moore.com, eparis@redhat.com, sgrubb@redhat.com, oleg@redhat.com, richard.henderson@linaro.org, mattst88@gmail.com, linmag7@gmail.com, linux@armlinux.org.uk, catalin.marinas@arm.com, will@kernel.org, guoren@kernel.org, monstr@monstr.eu, tsbogend@alpha.franken.de, jonas@southpole.se, stefan.kristiansson@saunalahti.fi, shorne@gmail.com, James.Bottomley@HansenPartnership.com, deller@gmx.de, ysato@users.sourceforge.jp, dalias@libc.org, glaubitz@physik.fu-berlin.de, davem@davemloft.net, andreas@gaisler.com, richard@nod.at, anton.ivanov@cambridgegreys.com, johannes@sipsolutions.net, chris@zankel.net, jcmvbkbc@gmail.com, tglx@kernel.org, peterz@infradead.org, luto@kernel.org, Ricardo Robaina Subject: [PATCH v2 08/13] openrisc: pass pt_regs to audit_syscall_entry() Date: Wed, 2 Sep 2026 11:43:41 -0300 Message-ID: <20dc1432035e116c2a0be75afc0504e4a8ac4274.1788351089.git.rrobaina@redhat.com> In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-Scanned-By: MIMEDefang 3.4.1 on 10.30.177.111 Content-Type: text/plain; charset="utf-8" audit_syscall_entry() now takes a pointer to pt_regs and extracts the syscall arguments itself via syscall_get_arguments(). Drop the individual argument registers from the call and pass regs instead. Signed-off-by: Ricardo Robaina --- arch/openrisc/kernel/ptrace.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/arch/openrisc/kernel/ptrace.c b/arch/openrisc/kernel/ptrace.c index 287a9718f0c6..eca613b84ff8 100644 --- a/arch/openrisc/kernel/ptrace.c +++ b/arch/openrisc/kernel/ptrace.c @@ -301,8 +301,7 @@ asmlinkage long do_syscall_trace_enter(struct pt_regs *= regs) */ ret =3D -1L; =20 - audit_syscall_entry(regs->gpr[11], regs->gpr[3], regs->gpr[4], - regs->gpr[5], regs->gpr[6]); + audit_syscall_entry(regs->gpr[11], regs); =20 return ret ? : regs->gpr[11]; } --=20 2.55.0 From nobody Sat Sep 26 10:01:17 2026 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id C44D84A3877 for ; Wed, 2 Sep 2026 14:46:22 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=170.10.129.124 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360384; cv=none; b=mL96+TrfY5QbYfw2kEQq44c811JwQpPAZ/T6XiRI+Jz2iyAmgkGC0jvQsgwbyAQKbybQ3mErDbBum+/BjcZ8TzYUjze+IhpPg1N+coxEPFpwUgv+seQ8EIZKtoEYeg1xvGLzGigZGQ21Z4VQfWqxxQk7S3QFpRFbXDXQZAnKEUc= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360384; c=relaxed/simple; bh=4IaYU5F5ZUse8/txNRWQkXrU6IWQl/7zD1+mzEskZsQ=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=d/yEfvf1dI0j+q5m/cmmZuTQ6kYo8rJZjvemNn3ph5NZnEFlN97dPsXk2kHAb3o4oSOZF+epmNxoP2Zx+zIe1XpvG0F/hmpe3UzmiloLG/w4FZd9URdZwh4JGE87V1awRqeHhSrkfouGFiDtIuw2mXod05zSObeVIdouj4ZDhP4= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com; spf=pass smtp.mailfrom=redhat.com; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b=ZJDYzkz8; arc=none smtp.client-ip=170.10.129.124 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=redhat.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b="ZJDYzkz8" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1788360381; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=w7y9W91HQGBu0H2CHYYe7IynyY+rFM6Tt6aZ3QhTjIQ=; b=ZJDYzkz82IKHld9P6uBZPzyYzu0hvREP7kDKrl9jzQkK246JcLUgKyShsvZWqfD9DbX7/d 3nKYVFgR1qmiCDbI0hyAaYGDDRMKz/1/NpFqsgZ+DGgdtbjQWpudmMVB6RDb9rHZYVwBqv LfUO5icyZIrHvvEtEvlDlzphNzwQQ2k= Received: from mx-prod-mc-06.mail-002.prod.us-west-2.aws.redhat.com (ec2-35-165-154-97.us-west-2.compute.amazonaws.com [35.165.154.97]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-621-dCVeTZG2PKK-c4lSlVKL2A-1; Wed, 02 Sep 2026 10:46:16 -0400 X-MC-Unique: dCVeTZG2PKK-c4lSlVKL2A-1 X-Mimecast-MFC-AGG-ID: dCVeTZG2PKK-c4lSlVKL2A_1788360371 Received: from mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com [10.30.177.111]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx-prod-mc-06.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTPS id 52069180133D; Wed, 2 Sep 2026 14:46:11 +0000 (UTC) Received: from wsxc.redhat.com (unknown [10.96.134.11]) by mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTP id 5965E1800643; Wed, 2 Sep 2026 14:45:58 +0000 (UTC) From: Ricardo Robaina To: audit@vger.kernel.org, linux-kernel@vger.kernel.org, linux-alpha@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-csky@vger.kernel.org, linux-mips@vger.kernel.org, linux-openrisc@vger.kernel.org, linux-parisc@vger.kernel.org, linux-sh@vger.kernel.org, sparclinux@vger.kernel.org, linux-um@lists.infradead.org, bpf@vger.kernel.org Cc: paul@paul-moore.com, eparis@redhat.com, sgrubb@redhat.com, oleg@redhat.com, richard.henderson@linaro.org, mattst88@gmail.com, linmag7@gmail.com, linux@armlinux.org.uk, catalin.marinas@arm.com, will@kernel.org, guoren@kernel.org, monstr@monstr.eu, tsbogend@alpha.franken.de, jonas@southpole.se, stefan.kristiansson@saunalahti.fi, shorne@gmail.com, James.Bottomley@HansenPartnership.com, deller@gmx.de, ysato@users.sourceforge.jp, dalias@libc.org, glaubitz@physik.fu-berlin.de, davem@davemloft.net, andreas@gaisler.com, richard@nod.at, anton.ivanov@cambridgegreys.com, johannes@sipsolutions.net, chris@zankel.net, jcmvbkbc@gmail.com, tglx@kernel.org, peterz@infradead.org, luto@kernel.org, Ricardo Robaina Subject: [PATCH v2 09/13] parisc: pass pt_regs to audit_syscall_entry() Date: Wed, 2 Sep 2026 11:43:42 -0300 Message-ID: <83d9a03e1fa526aef9f2ecac704c118a156401d7.1788351089.git.rrobaina@redhat.com> In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-Scanned-By: MIMEDefang 3.4.1 on 10.30.177.111 Content-Type: text/plain; charset="utf-8" audit_syscall_entry() now takes a pointer to pt_regs and extracts the syscall arguments itself via syscall_get_arguments(). Drop the individual argument registers from the call and pass regs instead. Signed-off-by: Ricardo Robaina --- arch/parisc/kernel/ptrace.c | 9 ++------- 1 file changed, 2 insertions(+), 7 deletions(-) diff --git a/arch/parisc/kernel/ptrace.c b/arch/parisc/kernel/ptrace.c index 1d9e210702e1..948e0cf29ba4 100644 --- a/arch/parisc/kernel/ptrace.c +++ b/arch/parisc/kernel/ptrace.c @@ -359,15 +359,10 @@ long do_syscall_trace_enter(struct pt_regs *regs) =20 #ifdef CONFIG_64BIT if (!is_compat_task()) - audit_syscall_entry(regs->gr[20], regs->gr[26], regs->gr[25], - regs->gr[24], regs->gr[23]); + audit_syscall_entry(regs->gr[20], regs); else #endif - audit_syscall_entry(regs->gr[20] & 0xffffffff, - regs->gr[26] & 0xffffffff, - regs->gr[25] & 0xffffffff, - regs->gr[24] & 0xffffffff, - regs->gr[23] & 0xffffffff); + audit_syscall_entry(regs->gr[20] & 0xffffffff, regs); =20 /* * Sign extend the syscall number to 64bit since it may have been --=20 2.55.0 From nobody Sat Sep 26 10:01:17 2026 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id F39B04A3F24 for ; Wed, 2 Sep 2026 14:46:31 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=170.10.129.124 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360393; cv=none; b=MwhptwtQe3Fao1P8330fCqkH+yfuZk4YMq6nRLwjbOTmBUhfxWzhwDtl8WPiT+SyYtRBaMJEs0l/HuXThFXWQ1Bno5eUDAwZo20DL07hCLId9VOmWn4YZHmzEB3cXepAfLSSXwHk2oUv9GubMKGk9Zq/pIn1cYIhWki914FQxAo= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360393; c=relaxed/simple; bh=DlPaEd7noW1KyP3qScWGZfq/VdVWdVf5pnn1WR+m1Ns=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=iR2aGQLNFKQce/DmfzCoPLLod2QcqS6xG2Oo50ANc4rsTxRxzUwoEnGHYQj875xqRlxqy4r2Xr4ge1Eyl9Sd45e6M/7E1ACZchkRopZZbqDosgepIOPoyyZJKU0U8g4GKn6fCKFqtR3X4qLvqdfYrae9CoB3e7DOQN1TQsAq1lE= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com; spf=pass smtp.mailfrom=redhat.com; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b=Z9kQ6EiZ; arc=none smtp.client-ip=170.10.129.124 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=redhat.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b="Z9kQ6EiZ" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1788360390; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=GiBzCemBLnI584lSVr86fUM8vzDEzjZRV2DJcn2fj5Q=; b=Z9kQ6EiZTbZ/y0L93WvyNTS2VTyLs+Bu+5PJ0d0A28DQtKM7bap2FOpvkbf/hHSxBoeCTt 8iMu7lWvtpvcAUFuCByExVELYaRwvFRkHGfIQE25akt9vXmsLpmY0/5RbjOTZ89r/tjyVi 4kEM6H++QjYpFd0G5VO7DPpMjEHpL2Q= Received: from mx-prod-mc-06.mail-002.prod.us-west-2.aws.redhat.com (ec2-35-165-154-97.us-west-2.compute.amazonaws.com [35.165.154.97]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-257-eYe4-cicPwqUztVTJjLHNA-1; Wed, 02 Sep 2026 10:46:27 -0400 X-MC-Unique: eYe4-cicPwqUztVTJjLHNA-1 X-Mimecast-MFC-AGG-ID: eYe4-cicPwqUztVTJjLHNA_1788360383 Received: from mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com [10.30.177.111]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx-prod-mc-06.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTPS id 2E1C4180131C; Wed, 2 Sep 2026 14:46:23 +0000 (UTC) Received: from wsxc.redhat.com (unknown [10.96.134.11]) by mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTP id C669F1800642; Wed, 2 Sep 2026 14:46:11 +0000 (UTC) From: Ricardo Robaina To: audit@vger.kernel.org, linux-kernel@vger.kernel.org, linux-alpha@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-csky@vger.kernel.org, linux-mips@vger.kernel.org, linux-openrisc@vger.kernel.org, linux-parisc@vger.kernel.org, linux-sh@vger.kernel.org, sparclinux@vger.kernel.org, linux-um@lists.infradead.org, bpf@vger.kernel.org Cc: paul@paul-moore.com, eparis@redhat.com, sgrubb@redhat.com, oleg@redhat.com, richard.henderson@linaro.org, mattst88@gmail.com, linmag7@gmail.com, linux@armlinux.org.uk, catalin.marinas@arm.com, will@kernel.org, guoren@kernel.org, monstr@monstr.eu, tsbogend@alpha.franken.de, jonas@southpole.se, stefan.kristiansson@saunalahti.fi, shorne@gmail.com, James.Bottomley@HansenPartnership.com, deller@gmx.de, ysato@users.sourceforge.jp, dalias@libc.org, glaubitz@physik.fu-berlin.de, davem@davemloft.net, andreas@gaisler.com, richard@nod.at, anton.ivanov@cambridgegreys.com, johannes@sipsolutions.net, chris@zankel.net, jcmvbkbc@gmail.com, tglx@kernel.org, peterz@infradead.org, luto@kernel.org, Ricardo Robaina Subject: [PATCH v2 10/13] sh: pass pt_regs to audit_syscall_entry() Date: Wed, 2 Sep 2026 11:43:43 -0300 Message-ID: <097bd384731da18be54fafd41f67c60e2a70e37e.1788351089.git.rrobaina@redhat.com> In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-Scanned-By: MIMEDefang 3.4.1 on 10.30.177.111 Content-Type: text/plain; charset="utf-8" audit_syscall_entry() now takes a pointer to pt_regs and extracts the syscall arguments itself via syscall_get_arguments(). Drop the individual argument registers from the call and pass regs instead. Signed-off-by: Ricardo Robaina --- arch/sh/kernel/ptrace_32.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/arch/sh/kernel/ptrace_32.c b/arch/sh/kernel/ptrace_32.c index 8794081483fb..e138f529ee7e 100644 --- a/arch/sh/kernel/ptrace_32.c +++ b/arch/sh/kernel/ptrace_32.c @@ -466,8 +466,7 @@ asmlinkage long do_syscall_trace_enter(struct pt_regs *= regs) if (unlikely(test_thread_flag(TIF_SYSCALL_TRACEPOINT))) trace_sys_enter(regs, regs->regs[0]); =20 - audit_syscall_entry(regs->regs[3], regs->regs[4], regs->regs[5], - regs->regs[6], regs->regs[7]); + audit_syscall_entry(regs->regs[3], regs); =20 return 0; } --=20 2.55.0 From nobody Sat Sep 26 10:01:17 2026 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 510864A43F1 for ; Wed, 2 Sep 2026 14:46:46 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=170.10.133.124 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360408; cv=none; b=CGrssl9fmbYATR9m1OIXomzjICWJ/dGpKPBqUuJeqXYa/CQUV8zLw2V22/leR/HbIt9C7cEXRl+inpiYoe1pMv82CWS8xY4/laOQTVnz4RZ1vdsuqIA4SyNCMs8f/NNK8tMLBfQlGGoO8PqsFAT5Fc1jkjVFujsOcBy1bEQRuxQ= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360408; c=relaxed/simple; bh=g/z2c0uejjbvW+bTUcXx6A5unb4ZHFpYUUEpYX5hIYw=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=oItr0NrPOXlMP//2GV3tvI2dbzbPefx5FvQeKuCxvrieSkjMEVW3wBl37Pf2Vi6N1BNQbJdIsHYHcWVOTWoX+E0FHlD7UnXAGcN36jGmPe8uZHzlBUl0+qsAVxvP3tnf9d+vZ86INGBUDuyLJXuyXBdKo21UOQs3wEvqk9JFj9Q= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com; spf=pass smtp.mailfrom=redhat.com; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b=TMJyK/d/; arc=none smtp.client-ip=170.10.133.124 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=redhat.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b="TMJyK/d/" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1788360404; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=d+wbQbDqSGkxHemqbPjciPTDnnklfXLc74JSqQp6y6I=; b=TMJyK/d/UnjOWmj+2vMZDGSBY19zXzzvmRarEhaMZfSMNorCbCB5wtEI6Ljc0HzJGqLCak UzWI7QNJosUdMQxPYwXmaw1ODDbv/ZBZAJLqGNChGo+0OTZHUzaPB3PItPzvSLk8y8HV8C WeUK1yJzDXObsu+IKUm1V1rxyycxeyg= Received: from mx-prod-mc-05.mail-002.prod.us-west-2.aws.redhat.com (ec2-54-186-198-63.us-west-2.compute.amazonaws.com [54.186.198.63]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-446-O9slN2rfNGSVNs8IHLvaPA-1; Wed, 02 Sep 2026 10:46:40 -0400 X-MC-Unique: O9slN2rfNGSVNs8IHLvaPA-1 X-Mimecast-MFC-AGG-ID: O9slN2rfNGSVNs8IHLvaPA_1788360395 Received: from mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com [10.30.177.111]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx-prod-mc-05.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTPS id 3C6021954AF4; Wed, 2 Sep 2026 14:46:35 +0000 (UTC) Received: from wsxc.redhat.com (unknown [10.96.134.11]) by mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTP id 8846F1800641; Wed, 2 Sep 2026 14:46:23 +0000 (UTC) From: Ricardo Robaina To: audit@vger.kernel.org, linux-kernel@vger.kernel.org, linux-alpha@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-csky@vger.kernel.org, linux-mips@vger.kernel.org, linux-openrisc@vger.kernel.org, linux-parisc@vger.kernel.org, linux-sh@vger.kernel.org, sparclinux@vger.kernel.org, linux-um@lists.infradead.org, bpf@vger.kernel.org Cc: paul@paul-moore.com, eparis@redhat.com, sgrubb@redhat.com, oleg@redhat.com, richard.henderson@linaro.org, mattst88@gmail.com, linmag7@gmail.com, linux@armlinux.org.uk, catalin.marinas@arm.com, will@kernel.org, guoren@kernel.org, monstr@monstr.eu, tsbogend@alpha.franken.de, jonas@southpole.se, stefan.kristiansson@saunalahti.fi, shorne@gmail.com, James.Bottomley@HansenPartnership.com, deller@gmx.de, ysato@users.sourceforge.jp, dalias@libc.org, glaubitz@physik.fu-berlin.de, davem@davemloft.net, andreas@gaisler.com, richard@nod.at, anton.ivanov@cambridgegreys.com, johannes@sipsolutions.net, chris@zankel.net, jcmvbkbc@gmail.com, tglx@kernel.org, peterz@infradead.org, luto@kernel.org, Ricardo Robaina Subject: [PATCH v2 11/13] sparc64: pass pt_regs to audit_syscall_entry() Date: Wed, 2 Sep 2026 11:43:44 -0300 Message-ID: <336fa8f8d896ca7989bc483b53fdefe2152a16f9.1788351089.git.rrobaina@redhat.com> In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-Scanned-By: MIMEDefang 3.4.1 on 10.30.177.111 Content-Type: text/plain; charset="utf-8" audit_syscall_entry() now takes a pointer to pt_regs and extracts the syscall arguments itself via syscall_get_arguments(). Drop the individual argument registers from the call and pass regs instead. Signed-off-by: Ricardo Robaina --- arch/sparc/kernel/ptrace_64.c | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/arch/sparc/kernel/ptrace_64.c b/arch/sparc/kernel/ptrace_64.c index 825ddf55fece..b162585b4a74 100644 --- a/arch/sparc/kernel/ptrace_64.c +++ b/arch/sparc/kernel/ptrace_64.c @@ -1098,9 +1098,7 @@ asmlinkage int syscall_trace_enter(struct pt_regs *re= gs) if (unlikely(test_thread_flag(TIF_SYSCALL_TRACEPOINT))) trace_sys_enter(regs, regs->u_regs[UREG_G1]); =20 - audit_syscall_entry(regs->u_regs[UREG_G1], regs->u_regs[UREG_I0], - regs->u_regs[UREG_I1], regs->u_regs[UREG_I2], - regs->u_regs[UREG_I3]); + audit_syscall_entry(regs->u_regs[UREG_G1], regs); =20 return ret; } --=20 2.55.0 From nobody Sat Sep 26 10:01:17 2026 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id B4C204A4846 for ; Wed, 2 Sep 2026 14:46:58 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=170.10.133.124 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360420; cv=none; b=TixoO9cGAaE76wF279DwMOAzMOQ0oYSxJkHJZldArD1xFTmREIWBIrYRTNVAhHuNEo3ZKNxYrdjgKrsU9EzB6QdbLz6oWpZRC0Nuwy8xzw1oCf7XMRkqsmfHLbMnrnBCjghj9OItBn7jxJh1JRkMuFnMQsqZYIoe0pi4MfdTrzc= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360420; c=relaxed/simple; bh=qaNpQ47O+nMx6JKMW9SpqDFRpcNJ2e0ML7m7iqV9m5g=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=Ha67U8as6xo2yPr2JBRh6amAC5werlmPmJHHP4rA/+Fd+ZA+KrqIP3k9piTZi+RA7e3IIvoBOBRtPE1syvtdeesyNR4DbT/HvitWdXjJAwTxPZORG82IMMLWiHi+eXeBDCzpgpppnwI/8TRR4/hjvbnxYCn+hO/sF3KMdDaCSaI= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com; spf=pass smtp.mailfrom=redhat.com; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b=ZVMJPzz6; arc=none smtp.client-ip=170.10.133.124 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=redhat.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b="ZVMJPzz6" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1788360417; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=ra0Ky6mXltAUt+LZScMYM+TpmdGUEEaSHVLD1V4U5Ys=; b=ZVMJPzz6sMeVM4CTXaV3xFUHU+XMQ3POGENgkypnM48thGpM3LS+YAmxZxMOk34flHtNnn nzzbCbuE+rnHQCNR39gvmgWohEaZKsu96q1ilugqcGqGyRL1UeEgS3dBvlMKI7MpjB4kAp v2FSMVQW3hLlgkGzswchPvqw6gNvuiU= Received: from mx-prod-mc-01.mail-002.prod.us-west-2.aws.redhat.com (ec2-54-186-198-63.us-west-2.compute.amazonaws.com [54.186.198.63]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-626-kRo0eReMMROZVka9N9pl2w-1; Wed, 02 Sep 2026 10:46:53 -0400 X-MC-Unique: kRo0eReMMROZVka9N9pl2w-1 X-Mimecast-MFC-AGG-ID: kRo0eReMMROZVka9N9pl2w_1788360408 Received: from mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com [10.30.177.111]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx-prod-mc-01.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTPS id 7D6671953976; Wed, 2 Sep 2026 14:46:47 +0000 (UTC) Received: from wsxc.redhat.com (unknown [10.96.134.11]) by mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTP id B08421800642; Wed, 2 Sep 2026 14:46:35 +0000 (UTC) From: Ricardo Robaina To: audit@vger.kernel.org, linux-kernel@vger.kernel.org, linux-alpha@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-csky@vger.kernel.org, linux-mips@vger.kernel.org, linux-openrisc@vger.kernel.org, linux-parisc@vger.kernel.org, linux-sh@vger.kernel.org, sparclinux@vger.kernel.org, linux-um@lists.infradead.org, bpf@vger.kernel.org Cc: paul@paul-moore.com, eparis@redhat.com, sgrubb@redhat.com, oleg@redhat.com, richard.henderson@linaro.org, mattst88@gmail.com, linmag7@gmail.com, linux@armlinux.org.uk, catalin.marinas@arm.com, will@kernel.org, guoren@kernel.org, monstr@monstr.eu, tsbogend@alpha.franken.de, jonas@southpole.se, stefan.kristiansson@saunalahti.fi, shorne@gmail.com, James.Bottomley@HansenPartnership.com, deller@gmx.de, ysato@users.sourceforge.jp, dalias@libc.org, glaubitz@physik.fu-berlin.de, davem@davemloft.net, andreas@gaisler.com, richard@nod.at, anton.ivanov@cambridgegreys.com, johannes@sipsolutions.net, chris@zankel.net, jcmvbkbc@gmail.com, tglx@kernel.org, peterz@infradead.org, luto@kernel.org, Ricardo Robaina Subject: [PATCH v2 12/13] um: pass pt_regs to audit_syscall_entry() Date: Wed, 2 Sep 2026 11:43:45 -0300 Message-ID: In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-Scanned-By: MIMEDefang 3.4.1 on 10.30.177.111 Content-Type: text/plain; charset="utf-8" audit_syscall_entry() now takes a pointer to pt_regs and extracts the syscall arguments itself via syscall_get_arguments(). Drop the individual argument registers from the call and pass regs instead. Signed-off-by: Ricardo Robaina --- arch/um/kernel/ptrace.c | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/arch/um/kernel/ptrace.c b/arch/um/kernel/ptrace.c index 7da0a5223aa6..bdc1b18bb342 100644 --- a/arch/um/kernel/ptrace.c +++ b/arch/um/kernel/ptrace.c @@ -123,11 +123,7 @@ static void send_sigtrap(struct uml_pt_regs *regs, int= error_code) */ int syscall_trace_enter(struct pt_regs *regs) { - audit_syscall_entry(UPT_SYSCALL_NR(®s->regs), - UPT_SYSCALL_ARG1(®s->regs), - UPT_SYSCALL_ARG2(®s->regs), - UPT_SYSCALL_ARG3(®s->regs), - UPT_SYSCALL_ARG4(®s->regs)); + audit_syscall_entry(UPT_SYSCALL_NR(®s->regs), regs); =20 if (test_thread_flag(TIF_SYSCALL_TRACEPOINT)) trace_sys_enter(regs, UPT_SYSCALL_NR(®s->regs)); --=20 2.55.0 From nobody Sat Sep 26 10:01:17 2026 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 4C87A4A3F09 for ; Wed, 2 Sep 2026 14:47:10 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=170.10.129.124 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360431; cv=none; b=P2BQFqNZBYDLuopAuFXUpg+W7R6WRH5Y+/ObmLQ+v+nOBTpsC0LbVxXe2VE29rOaZ7PKHV14NsZ1La882MVg2vY9h76ffYdsWGQ2nOGvhMbQ5a8mA2+sNAtHdqQmekG3S40QLdjFX2Ox4BROv4alHkGM12MPhtHGYNaomS7BWIc= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788360431; c=relaxed/simple; bh=kfiDLo+BxdeMyd7DwCKHFv96MicNeVsjL5sGevnIHXM=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=kE85/uYDlvokIbWSdPKPpacp2avvR+LLAwsXoXmUfFme+JQ16xSGMS+X5sCyNti1VqYahZrxT0C8gw92OvdLUmdZXUaGCSqvF4anCl/asLWn4wXjdgF32kPMUErFZhwPuGPcnd70e5V51L0UxLdmx/+SOLdG/rUXdBDtifpeEXk= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com; spf=pass smtp.mailfrom=redhat.com; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b=AQdrQpuA; arc=none smtp.client-ip=170.10.129.124 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=redhat.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b="AQdrQpuA" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1788360429; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=nZoYau2WBD6IZMmGu3u7wBhLPz0DgKCouySyNxSkIQc=; b=AQdrQpuAXfibkSrEnYdG2aXpoqkQ31Zh/wQ1lvQY6hX0jcLT2JTNZ3cWkV0czzIn4HpGBB Pi8hjsCEDkrwMxE55aWqFNn5a/nNIZzjbxivA8J5FmMHcgMUVJSecMSWLRXgAnyb+LbRVx xojkZKNkMQ6PUAVXb7EJtmxkIo/qM4I= Received: from mx-prod-mc-01.mail-002.prod.us-west-2.aws.redhat.com (ec2-54-186-198-63.us-west-2.compute.amazonaws.com [54.186.198.63]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-501-6y8aj7x6Pwq6ejExRIcZDg-1; Wed, 02 Sep 2026 10:47:04 -0400 X-MC-Unique: 6y8aj7x6Pwq6ejExRIcZDg-1 X-Mimecast-MFC-AGG-ID: 6y8aj7x6Pwq6ejExRIcZDg_1788360419 Received: from mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com [10.30.177.111]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx-prod-mc-01.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTPS id 6C6DE19539B7; Wed, 2 Sep 2026 14:46:59 +0000 (UTC) Received: from wsxc.redhat.com (unknown [10.96.134.11]) by mx-prod-int-08.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTP id F080B1800643; Wed, 2 Sep 2026 14:46:47 +0000 (UTC) From: Ricardo Robaina To: audit@vger.kernel.org, linux-kernel@vger.kernel.org, linux-alpha@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-csky@vger.kernel.org, linux-mips@vger.kernel.org, linux-openrisc@vger.kernel.org, linux-parisc@vger.kernel.org, linux-sh@vger.kernel.org, sparclinux@vger.kernel.org, linux-um@lists.infradead.org, bpf@vger.kernel.org Cc: paul@paul-moore.com, eparis@redhat.com, sgrubb@redhat.com, oleg@redhat.com, richard.henderson@linaro.org, mattst88@gmail.com, linmag7@gmail.com, linux@armlinux.org.uk, catalin.marinas@arm.com, will@kernel.org, guoren@kernel.org, monstr@monstr.eu, tsbogend@alpha.franken.de, jonas@southpole.se, stefan.kristiansson@saunalahti.fi, shorne@gmail.com, James.Bottomley@HansenPartnership.com, deller@gmx.de, ysato@users.sourceforge.jp, dalias@libc.org, glaubitz@physik.fu-berlin.de, davem@davemloft.net, andreas@gaisler.com, richard@nod.at, anton.ivanov@cambridgegreys.com, johannes@sipsolutions.net, chris@zankel.net, jcmvbkbc@gmail.com, tglx@kernel.org, peterz@infradead.org, luto@kernel.org, Ricardo Robaina Subject: [PATCH v2 13/13] xtensa: pass pt_regs to audit_syscall_entry() Date: Wed, 2 Sep 2026 11:43:46 -0300 Message-ID: In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-Scanned-By: MIMEDefang 3.4.1 on 10.30.177.111 Content-Type: text/plain; charset="utf-8" audit_syscall_entry() now takes a pointer to pt_regs and extracts the syscall arguments itself via syscall_get_arguments(). Drop the individual argument registers from the call and pass regs instead. Signed-off-by: Ricardo Robaina --- arch/xtensa/kernel/ptrace.c | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/arch/xtensa/kernel/ptrace.c b/arch/xtensa/kernel/ptrace.c index 364e4fdabb00..327e00c2ebde 100644 --- a/arch/xtensa/kernel/ptrace.c +++ b/arch/xtensa/kernel/ptrace.c @@ -561,9 +561,7 @@ int do_syscall_trace_enter(struct pt_regs *regs) if (test_thread_flag(TIF_SYSCALL_TRACEPOINT)) trace_sys_enter(regs, syscall_get_nr(current, regs)); =20 - audit_syscall_entry(regs->syscall, regs->areg[6], - regs->areg[3], regs->areg[4], - regs->areg[5]); + audit_syscall_entry(regs->syscall, regs); return 1; } =20 --=20 2.55.0