From 909a3f0e9d8b0d8001cf6e99808f88eca8e44328 Mon Sep 17 00:00:00 2001 From: Cheng Lingfei Date: Mon, 24 Aug 2026 20:45:46 +0800 Subject: docs: cgroup-v2: fix misc.events key format description MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit In misc cgroup, misc.events does not output a simple "max" key. Instead, each registered misc resource outputs a separate key suffixed with ".max" (i.e., ".max"). Update the documentation to clarify that the entry key is ".max". Suggested-by: Michal Koutný Signed-off-by: Cheng Lingfei Signed-off-by: Tejun Heo --- lib/compat_audit.c | 56 ++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 56 insertions(+) create mode 100644 lib/compat_audit.c (limited to 'lib/compat_audit.c') diff --git a/lib/compat_audit.c b/lib/compat_audit.c new file mode 100644 index 000000000..fee1dfccd --- /dev/null +++ b/lib/compat_audit.c @@ -0,0 +1,56 @@ +// SPDX-License-Identifier: GPL-2.0 +#include +#include +#include +#include + +unsigned int compat_dir_class[] = { +#include +~0U +}; + +unsigned int compat_read_class[] = { +#include +~0U +}; + +unsigned int compat_write_class[] = { +#include +~0U +}; + +unsigned int compat_chattr_class[] = { +#include +~0U +}; + +unsigned int compat_signal_class[] = { +#include +~0U +}; + +int audit_classify_compat_syscall(int abi, unsigned int syscall) +{ + switch (syscall) { +#ifdef __NR_open + case __NR_open: + return AUDITSC_OPEN; +#endif +#ifdef __NR_openat + case __NR_openat: + return AUDITSC_OPENAT; +#endif +#ifdef __NR_socketcall + case __NR_socketcall: + return AUDITSC_SOCKETCALL; +#endif + case __NR_execve: + return AUDITSC_EXECVE; +#ifdef __NR_openat2 + case __NR_openat2: + return AUDITSC_OPENAT2; +#endif + default: + return AUDITSC_COMPAT; + } +} -- cgit v1.3.1