[PATCH 04/13] arm64: pass all six syscall args to audit_syscall_entry()
Ricardo Robaina
rrobaina at redhat.com
Thu Aug 13 10:02:54 PDT 2026
Update the audit_syscall_entry() call to forward the 5th and 6th
syscall arguments (regs[4], regs[5]) now that the audit core logs
all six.
Signed-off-by: Ricardo Robaina <rrobaina at redhat.com>
---
arch/arm64/kernel/ptrace.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/arch/arm64/kernel/ptrace.c b/arch/arm64/kernel/ptrace.c
index 4d08598e2891..093c20bff38a 100644
--- a/arch/arm64/kernel/ptrace.c
+++ b/arch/arm64/kernel/ptrace.c
@@ -2427,7 +2427,8 @@ int syscall_trace_enter(struct pt_regs *regs)
trace_sys_enter(regs, regs->syscallno);
audit_syscall_entry(regs->syscallno, regs->orig_x0, regs->regs[1],
- regs->regs[2], regs->regs[3]);
+ regs->regs[2], regs->regs[3],
+ regs->regs[4], regs->regs[5]);
return regs->syscallno;
}
--
2.55.0
More information about the linux-arm-kernel
mailing list