commit 40aae55bbc1d52c1dddd38f462021c0358ef6e39
author Wez <wez@google.com> Fri Feb 14 13:11:41 2025 -0800
committer CQ Bot <fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com> Fri Feb 14 13:11:41 2025 -0800
tree e4ff6b956debb32af718900a39aa806f7292cb9b
parent a2312bcc6c8954286136cd01310a410ea4bbf134

[sestarnix] Revise the audit-logging mechanism to support details

Introduce an AuditContext that can be cheaply instantiated in each
hook that performs permission checks, to allow details of the
invoking task, file being accessed, etc, to be audit-logged.

This initial implementation supports audit details for CurrentTask,
FileObject, and FsNode, and "layering" of caller-supplied audit
context with additional context by helper functions such as
has_file_permission(), etc.

CurrentTask context is not actually included in audit logs in this
implementation, because the details are already included by the
tags added by Starnix to each log line.

Bug: 362707360
Change-Id: I6bbdade0bc61f763eccb177e826dc0600c88ed1c
Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1205847
Commit-Queue: Wez <wez@google.com>
Fuchsia-Auto-Submit: Wez <wez@google.com>
Reviewed-by: Ali Zhang <alizhang@google.com>
Commit-Queue: Auto-Submit <auto-submit@fuchsia-infra.iam.gserviceaccount.com>
Reviewed-by: Laura Peskin <pesk@google.com>
Reviewed-by: Miguel Flores <miguelfrde@google.com>