Files
kernel_arpi/include/uapi/linux
Ondrej Mosnacek 2d87a0674b timekeeping: Audit clock adjustments
Emit an audit record whenever the system clock is changed (i.e. shifted
by a non-zero offset) by a syscall from userspace. The syscalls than can
(at the time of writing) trigger such record are:
  - settimeofday(2), stime(2), clock_settime(2) -- via
    do_settimeofday64()
  - adjtimex(2), clock_adjtime(2) -- via do_adjtimex()

The new records have type AUDIT_TIME_INJOFFSET and contain the following
fields:
  - sec -- the 'seconds' part of the offset
  - nsec -- the 'nanoseconds' part of the offset

Example record (time was shifted backwards by ~15.875 seconds):

type=TIME_INJOFFSET msg=audit(1530616049.652:13): sec=-16 nsec=124887145

The records of this type will be associated with the corresponding
syscall records.

Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
Reviewed-by: Richard Guy Briggs <rgb@redhat.com>
Reviewed-by: Thomas Gleixner <tglx@linutronix.de>
[PM: fixed a line width problem in __audit_tk_injoffset()]
Signed-off-by: Paul Moore <paul@paul-moore.com>
2019-04-15 18:10:17 -04:00
..
2019-01-28 08:13:52 +01:00
2019-04-15 18:10:17 -04:00
2019-03-07 18:32:01 -08:00
2019-01-24 11:11:42 -07:00
2019-03-02 10:48:27 -08:00
2019-02-14 11:51:51 -05:00
2018-12-20 19:13:07 +01:00
2018-06-18 15:11:53 +10:00
2018-09-13 10:46:24 +02:00
2018-09-05 22:27:11 -07:00
2018-11-30 17:16:38 -08:00
2018-07-07 17:41:38 +02:00
2018-08-03 10:03:57 -07:00
2019-02-18 15:39:49 -05:00
2018-12-19 09:40:13 +01:00
2018-04-11 10:28:37 -07:00
2018-12-16 12:15:25 -08:00
2018-12-01 12:38:32 +01:00
2019-01-22 10:21:45 +01:00
2018-05-31 00:13:56 +08:00
2018-04-14 11:59:31 -04:00
2018-04-11 10:28:37 -07:00
2019-02-14 11:51:51 -05:00
2019-02-01 15:00:55 -08:00
2018-09-03 13:29:38 +02:00