[PATCH v2 1/3] audit(userspace): Add missing syscalls for AArch64

There are missing system call entries in lookup table for AArch64. This patch adds them based on kernel's include/uapi/asm-generic/unistd.h, which AArch64 (or arm64 in kernel) relies on. System call names here are derived directly from called fuctions by removing prefix 'sys_' and postfix '64'. The exceptions are: * fadvise64 * prlimit64 * fstat because we want to keep compatibility with other arch's namings like on x86 or s390x. Signed-off-by: AKASHI Takahiro <takahiro.akashi(a)linaro.org&gt; --- lib/aarch64_table.h | 17 ++++++++++++++--- 1 file changed, 14 insertions(+), 3 deletions(-) diff --git a/lib/aarch64_table.h b/lib/aarch64_table.h index 56f4d33..5dcd349 100644 --- a/lib/aarch64_table.h +++ b/lib/aarch64_table.h @@ -45,6 +45,7 @@ _S(21, "epoll_ctl") _S(22, "epoll_pwait") _S(23, "dup") _S(24, "dup3") +_S(25, "fcntl") _S(26, "inotify_init1") _S(27, "inotify_add_watch") _S(28, "inotify_rm_watch") @@ -62,6 +63,10 @@ _S(39, "umount2") _S(40, "mount") _S(41, "pivot_root") _S(42, "nfsservctl") +_S(43, "statfs") +_S(44, "fstatfs") +_S(45, "truncate") +_S(46, "ftruncate") _S(47, "fallocate") _S(48, "faccessat") _S(49, "chdir") @@ -76,15 +81,17 @@ _S(57, "close") _S(58, "vhangup") _S(59, "pipe2") _S(60, "quotactl") -_S(61, "getdents64") +_S(61, "getdents") +_S(62, "lseek") _S(63, "read") _S(64, "write") _S(65, "readv") _S(66, "writev") -_S(67, "pread64") -_S(68, "pwrite64") +_S(67, "pread") +_S(68, "pwrite") _S(69, "preadv") _S(70, "pwritev") +_S(71, "sendfile") _S(72, "pselect6") _S(73, "ppoll") _S(74, "signalfd4") @@ -92,6 +99,8 @@ _S(75, "vmsplice") _S(76, "splice") _S(77, "tee") _S(78, "readlinkat") +_S(79, "newfstatat") +_S(80, "newfstat") _S(81, "sync") _S(82, "fsync") _S(83, "fdatasync") @@ -233,6 +242,8 @@ _S(218, "request_key") _S(219, "keyctl") _S(220, "clone") _S(221, "execve") +_S(222, "mmap") +_S(223, "fadvise64") _S(224, "swapon") _S(225, "swapoff") _S(226, "mprotect") -- 1.7.9.5