[RFC PATCH 1/2] audit(userspace): Add missing syscalls for AArch64
Based on kernel's include/uapi/asm-generic/unistd.h.
System call names here are derived directly from called fuctions
by removing prefix 'sys_'. This may sometimes lead to some strange
conventions against well-known system calls,
for example,
* fadvise64_64 can be posix_fadvise or fadvise64
* newfstat can be fstat64 or just fstat
* (f)statfs64 can be (f)statfs
and so on.
Signed-off-by: AKASHI Takahiro <takahiro.akashi(a)linaro.org>
---
lib/aarch64_table.h | 11 +++++++++++
1 file changed, 11 insertions(+)
diff --git a/lib/aarch64_table.h b/lib/aarch64_table.h
index 56f4d33..40a1353 100644
--- a/lib/aarch64_table.h
+++ b/lib/aarch64_table.h
@@ -45,6 +45,7 @@ _S(21, "epoll_ctl")
_S(22, "epoll_pwait")
_S(23, "dup")
_S(24, "dup3")
+_S(25, "fcntl")
_S(26, "inotify_init1")
_S(27, "inotify_add_watch")
_S(28, "inotify_rm_watch")
@@ -62,6 +63,10 @@ _S(39, "umount2")
_S(40, "mount")
_S(41, "pivot_root")
_S(42, "nfsservctl")
+_S(43, "statfs64")
+_S(44, "fstatfs64")
+_S(45, "truncate64")
+_S(46, "ftruncate64")
_S(47, "fallocate")
_S(48, "faccessat")
_S(49, "chdir")
@@ -77,6 +82,7 @@ _S(58, "vhangup")
_S(59, "pipe2")
_S(60, "quotactl")
_S(61, "getdents64")
+_S(62, "lseek")
_S(63, "read")
_S(64, "write")
_S(65, "readv")
@@ -85,6 +91,7 @@ _S(67, "pread64")
_S(68, "pwrite64")
_S(69, "preadv")
_S(70, "pwritev")
+_S(71, "sendfile64")
_S(72, "pselect6")
_S(73, "ppoll")
_S(74, "signalfd4")
@@ -92,6 +99,8 @@ _S(75, "vmsplice")
_S(76, "splice")
_S(77, "tee")
_S(78, "readlinkat")
+_S(79, "newfstatat")
+_S(80, "newfstat")
_S(81, "sync")
_S(82, "fsync")
_S(83, "fdatasync")
@@ -233,6 +242,8 @@ _S(218, "request_key")
_S(219, "keyctl")
_S(220, "clone")
_S(221, "execve")
+_S(222, "mmap")
+_S(223, "fadvise64_64")
_S(224, "swapon")
_S(225, "swapoff")
_S(226, "mprotect")
--
1.7.9.5