arch/x86/ia32/audit.c
Source file repositories/reference/linux-study-clean/arch/x86/ia32/audit.c
File Facts
- System
- Linux kernel
- Corpus path
arch/x86/ia32/audit.c- Extension
.c- Size
- 864 bytes
- Lines
- 49
- Domain
- Architecture Layer
- Bucket
- arch/x86
- Inferred role
- Architecture Layer: implementation source
- Status
- source implementation candidate
Why This File Exists
CPU and platform-specific kernel glue: boot entry, traps, syscall entry, interrupts, page tables, context switch, and low-level barriers.
- CPU and platform-specific kernel glue: boot entry, traps, syscall entry, interrupts, page tables, context switch, and low-level barriers.
Dependency Surface
linux/audit_arch.hasm/unistd_32.hasm/audit.hasm-generic/audit_dir_write.hasm-generic/audit_change_attr.hasm-generic/audit_write.hasm-generic/audit_read.hasm-generic/audit_signal.h
Detected Declarations
function ia32_classify_syscall
Annotated Snippet
// SPDX-License-Identifier: GPL-2.0
#include <linux/audit_arch.h>
#include <asm/unistd_32.h>
#include <asm/audit.h>
unsigned ia32_dir_class[] = {
#include <asm-generic/audit_dir_write.h>
~0U
};
unsigned ia32_chattr_class[] = {
#include <asm-generic/audit_change_attr.h>
~0U
};
unsigned ia32_write_class[] = {
#include <asm-generic/audit_write.h>
~0U
};
unsigned ia32_read_class[] = {
#include <asm-generic/audit_read.h>
~0U
};
unsigned ia32_signal_class[] = {
#include <asm-generic/audit_signal.h>
~0U
};
int ia32_classify_syscall(unsigned syscall)
{
switch (syscall) {
case __NR_open:
return AUDITSC_OPEN;
case __NR_openat:
return AUDITSC_OPENAT;
case __NR_socketcall:
return AUDITSC_SOCKETCALL;
case __NR_execve:
case __NR_execveat:
return AUDITSC_EXECVE;
case __NR_openat2:
return AUDITSC_OPENAT2;
default:
return AUDITSC_COMPAT;
}
}
Annotation
- Immediate include surface: `linux/audit_arch.h`, `asm/unistd_32.h`, `asm/audit.h`, `asm-generic/audit_dir_write.h`, `asm-generic/audit_change_attr.h`, `asm-generic/audit_write.h`, `asm-generic/audit_read.h`, `asm-generic/audit_signal.h`.
- Detected declarations: `function ia32_classify_syscall`.
- Atlas domain: Architecture Layer / arch/x86.
- Implementation status: source implementation candidate.
Implementation Notes
- This generated page is the file-by-file coverage layer; curated subsystem chapters should link here when they synthesize a multi-file control flow.
- Core OS pages should be promoted from atlas-only to deep-reviewed when they explain data structures, invariants, locking, lifecycle, and C implementation snippets.
- Driver-family pages are intentionally pattern-oriented unless they are part of the selected PCIe/NVMe representative device path.