mirror of
https://github.com/team-infusion-developers/android_kernel_samsung_msm8976.git
synced 2024-10-31 18:09:19 +00:00
748d68441f
Improves the ability of a malware protection program to detect anomalies in various activities. It records task activities in a log and rates the actions according to how a typical user would use the tools. Change-Id: I976bc97f57215f173b046326b5f905522d785288 Signed-off-by: Mona Hossain <mhossain@codeaurora.org> Signed-off-by: William Clark <wclark@codeaurora.org> Signed-off-by: Mallikarjuna Reddy Amireddy <mamire@codeaurora.org>
156 lines
3.7 KiB
C
156 lines
3.7 KiB
C
/*
|
|
* Copyright (c) 2015, The Linux Foundation. All rights reserved.
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License version 2 and
|
|
* only version 2 as published by the Free Software Foundation.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*/
|
|
#ifndef __SEEMP_LOGK_STUB__
|
|
#define __SEEMP_LOGK_STUB__
|
|
|
|
#ifdef CONFIG_SEEMP_CORE
|
|
#include <linux/kernel.h>
|
|
|
|
#define MAX_BUF_SIZE 188
|
|
|
|
#define SEEMP_LOGK_API_SIZE sizeof(int)
|
|
|
|
/* Write: api_id + skip encoding byte + params */
|
|
#define SEEMP_LOGK_RECORD(api_id, format, ...) do { \
|
|
*((int *)(buf - SEEMP_LOGK_API_SIZE)) = api_id; \
|
|
snprintf(buf + 1, MAX_BUF_SIZE - 1, format, ##__VA_ARGS__); \
|
|
} while (0)
|
|
|
|
extern void *(*seemp_logk_kernel_begin)(char **buf);
|
|
extern void (*seemp_logk_kernel_end)(void *blck);
|
|
|
|
static inline void *seemp_setup_buf(char **buf)
|
|
{
|
|
void *blck;
|
|
|
|
if (seemp_logk_kernel_begin && seemp_logk_kernel_end) {
|
|
blck = seemp_logk_kernel_begin(buf);
|
|
if (!*buf) {
|
|
seemp_logk_kernel_end(blck);
|
|
return NULL;
|
|
}
|
|
} else {
|
|
return NULL;
|
|
}
|
|
return blck;
|
|
}
|
|
/*
|
|
* NOTE: only sendto is going to be instrumented
|
|
* since send sys call internally calls sendto
|
|
* with 2 extra parameters
|
|
*/
|
|
static inline void seemp_logk_sendto(int fd, void __user *buff, size_t len,
|
|
unsigned flags, struct sockaddr __user *addr, int addr_len)
|
|
{
|
|
char *buf = NULL;
|
|
void *blck = NULL;
|
|
|
|
/*sets up buf and blck correctly*/
|
|
blck = seemp_setup_buf(&buf);
|
|
if (!blck)
|
|
return;
|
|
|
|
/*fill the buf*/
|
|
SEEMP_LOGK_RECORD(SEEMP_API_kernel__sendto, "len=%u,fd=%d",
|
|
(unsigned int)len, fd);
|
|
|
|
seemp_logk_kernel_end(blck);
|
|
}
|
|
|
|
/*
|
|
* NOTE: only recvfrom is going to be instrumented
|
|
* since recv sys call internally calls recvfrom
|
|
* with 2 extra parameters
|
|
*/
|
|
static inline void seemp_logk_recvfrom(int fd, void __user *ubuf,
|
|
size_t size, unsigned flags, struct sockaddr __user *addr,
|
|
int __user *addr_len)
|
|
{
|
|
char *buf = NULL;
|
|
void *blck = NULL;
|
|
|
|
/*sets up buf and blck correctly*/
|
|
blck = seemp_setup_buf(&buf);
|
|
if (!blck)
|
|
return;
|
|
|
|
/*fill the buf*/
|
|
SEEMP_LOGK_RECORD(SEEMP_API_kernel__recvfrom, "size=%u,fd=%d",
|
|
(unsigned int)size, fd);
|
|
|
|
seemp_logk_kernel_end(blck);
|
|
}
|
|
|
|
static inline void seemp_logk_oom_adjust_write(pid_t pid,
|
|
uid_t uid, int oom_adj)
|
|
{
|
|
char *buf = NULL;
|
|
void *blck = NULL;
|
|
|
|
/*sets up buf and blck correctly*/
|
|
blck = seemp_setup_buf(&buf);
|
|
if (!blck)
|
|
return;
|
|
|
|
/*fill the buf*/
|
|
SEEMP_LOGK_RECORD(SEEMP_API_kernel__oom_adjust_write,
|
|
"app_uid=%d,app_pid=%d,oom_adj=%d",
|
|
uid, pid, oom_adj);
|
|
|
|
seemp_logk_kernel_end(blck);
|
|
}
|
|
|
|
static inline void seemp_logk_oom_score_adj_write(pid_t pid, uid_t uid,
|
|
int oom_adj_score)
|
|
{
|
|
char *buf = NULL;
|
|
void *blck = NULL;
|
|
|
|
/*sets up buf and blck correctly*/
|
|
blck = seemp_setup_buf(&buf);
|
|
if (!blck)
|
|
return;
|
|
|
|
/*fill the buf*/
|
|
snprintf(buf, MAX_BUF_SIZE,
|
|
"-1|kernel|oom_score_adj_write|app_uid=%d,app_pid=%d,oom_adj=%d|--end",
|
|
uid, pid, oom_adj_score);
|
|
|
|
seemp_logk_kernel_end(blck);
|
|
}
|
|
|
|
#else
|
|
static inline void seemp_logk_sendto(int fd, void __user *buff,
|
|
size_t len, unsigned flags, struct sockaddr __user *addr,
|
|
int addr_len)
|
|
{
|
|
}
|
|
|
|
static inline void seemp_logk_recvfrom
|
|
(int fd, void __user *ubuf, size_t size,
|
|
unsigned flags, struct sockaddr __user *addr,
|
|
int __user *addr_len)
|
|
{
|
|
}
|
|
|
|
static inline void seemp_logk_oom_adjust_write
|
|
(pid_t pid, kuid_t uid, int oom_adj)
|
|
{
|
|
}
|
|
|
|
static inline void seemp_logk_oom_score_adj_write
|
|
(pid_t pid, kuid_t uid, int oom_adj_score)
|
|
{
|
|
}
|
|
#endif
|
|
#endif
|