1*a71a9546SAutomerger Merge Worker /* Shared library add-on to xtables for AUDIT
2*a71a9546SAutomerger Merge Worker *
3*a71a9546SAutomerger Merge Worker * (C) 2010-2011, Thomas Graf <[email protected]>
4*a71a9546SAutomerger Merge Worker * (C) 2010-2011, Red Hat, Inc.
5*a71a9546SAutomerger Merge Worker *
6*a71a9546SAutomerger Merge Worker * This program is distributed under the terms of GNU GPL v2, 1991
7*a71a9546SAutomerger Merge Worker */
8*a71a9546SAutomerger Merge Worker #include <stdio.h>
9*a71a9546SAutomerger Merge Worker #include <string.h>
10*a71a9546SAutomerger Merge Worker #include <xtables.h>
11*a71a9546SAutomerger Merge Worker #include <linux/netfilter/xt_AUDIT.h>
12*a71a9546SAutomerger Merge Worker
13*a71a9546SAutomerger Merge Worker enum {
14*a71a9546SAutomerger Merge Worker O_AUDIT_TYPE = 0,
15*a71a9546SAutomerger Merge Worker };
16*a71a9546SAutomerger Merge Worker
audit_help(void)17*a71a9546SAutomerger Merge Worker static void audit_help(void)
18*a71a9546SAutomerger Merge Worker {
19*a71a9546SAutomerger Merge Worker printf(
20*a71a9546SAutomerger Merge Worker "AUDIT target options\n"
21*a71a9546SAutomerger Merge Worker " --type TYPE Action type to be recorded.\n");
22*a71a9546SAutomerger Merge Worker }
23*a71a9546SAutomerger Merge Worker
24*a71a9546SAutomerger Merge Worker static const struct xt_option_entry audit_opts[] = {
25*a71a9546SAutomerger Merge Worker {.name = "type", .id = O_AUDIT_TYPE, .type = XTTYPE_STRING,
26*a71a9546SAutomerger Merge Worker .flags = XTOPT_MAND},
27*a71a9546SAutomerger Merge Worker XTOPT_TABLEEND,
28*a71a9546SAutomerger Merge Worker };
29*a71a9546SAutomerger Merge Worker
audit_parse(struct xt_option_call * cb)30*a71a9546SAutomerger Merge Worker static void audit_parse(struct xt_option_call *cb)
31*a71a9546SAutomerger Merge Worker {
32*a71a9546SAutomerger Merge Worker struct xt_audit_info *einfo = cb->data;
33*a71a9546SAutomerger Merge Worker
34*a71a9546SAutomerger Merge Worker xtables_option_parse(cb);
35*a71a9546SAutomerger Merge Worker if (strcasecmp(cb->arg, "accept") == 0)
36*a71a9546SAutomerger Merge Worker einfo->type = XT_AUDIT_TYPE_ACCEPT;
37*a71a9546SAutomerger Merge Worker else if (strcasecmp(cb->arg, "drop") == 0)
38*a71a9546SAutomerger Merge Worker einfo->type = XT_AUDIT_TYPE_DROP;
39*a71a9546SAutomerger Merge Worker else if (strcasecmp(cb->arg, "reject") == 0)
40*a71a9546SAutomerger Merge Worker einfo->type = XT_AUDIT_TYPE_REJECT;
41*a71a9546SAutomerger Merge Worker else
42*a71a9546SAutomerger Merge Worker xtables_error(PARAMETER_PROBLEM,
43*a71a9546SAutomerger Merge Worker "Bad action type value \"%s\"", cb->arg);
44*a71a9546SAutomerger Merge Worker }
45*a71a9546SAutomerger Merge Worker
audit_print(const void * ip,const struct xt_entry_target * target,int numeric)46*a71a9546SAutomerger Merge Worker static void audit_print(const void *ip, const struct xt_entry_target *target,
47*a71a9546SAutomerger Merge Worker int numeric)
48*a71a9546SAutomerger Merge Worker {
49*a71a9546SAutomerger Merge Worker const struct xt_audit_info *einfo =
50*a71a9546SAutomerger Merge Worker (const struct xt_audit_info *)target->data;
51*a71a9546SAutomerger Merge Worker
52*a71a9546SAutomerger Merge Worker printf(" AUDIT ");
53*a71a9546SAutomerger Merge Worker
54*a71a9546SAutomerger Merge Worker switch(einfo->type) {
55*a71a9546SAutomerger Merge Worker case XT_AUDIT_TYPE_ACCEPT:
56*a71a9546SAutomerger Merge Worker printf("accept");
57*a71a9546SAutomerger Merge Worker break;
58*a71a9546SAutomerger Merge Worker case XT_AUDIT_TYPE_DROP:
59*a71a9546SAutomerger Merge Worker printf("drop");
60*a71a9546SAutomerger Merge Worker break;
61*a71a9546SAutomerger Merge Worker case XT_AUDIT_TYPE_REJECT:
62*a71a9546SAutomerger Merge Worker printf("reject");
63*a71a9546SAutomerger Merge Worker break;
64*a71a9546SAutomerger Merge Worker }
65*a71a9546SAutomerger Merge Worker }
66*a71a9546SAutomerger Merge Worker
audit_save(const void * ip,const struct xt_entry_target * target)67*a71a9546SAutomerger Merge Worker static void audit_save(const void *ip, const struct xt_entry_target *target)
68*a71a9546SAutomerger Merge Worker {
69*a71a9546SAutomerger Merge Worker const struct xt_audit_info *einfo =
70*a71a9546SAutomerger Merge Worker (const struct xt_audit_info *)target->data;
71*a71a9546SAutomerger Merge Worker
72*a71a9546SAutomerger Merge Worker switch(einfo->type) {
73*a71a9546SAutomerger Merge Worker case XT_AUDIT_TYPE_ACCEPT:
74*a71a9546SAutomerger Merge Worker printf(" --type accept");
75*a71a9546SAutomerger Merge Worker break;
76*a71a9546SAutomerger Merge Worker case XT_AUDIT_TYPE_DROP:
77*a71a9546SAutomerger Merge Worker printf(" --type drop");
78*a71a9546SAutomerger Merge Worker break;
79*a71a9546SAutomerger Merge Worker case XT_AUDIT_TYPE_REJECT:
80*a71a9546SAutomerger Merge Worker printf(" --type reject");
81*a71a9546SAutomerger Merge Worker break;
82*a71a9546SAutomerger Merge Worker }
83*a71a9546SAutomerger Merge Worker }
84*a71a9546SAutomerger Merge Worker
audit_xlate(struct xt_xlate * xl,const struct xt_xlate_tg_params * params)85*a71a9546SAutomerger Merge Worker static int audit_xlate(struct xt_xlate *xl,
86*a71a9546SAutomerger Merge Worker const struct xt_xlate_tg_params *params)
87*a71a9546SAutomerger Merge Worker {
88*a71a9546SAutomerger Merge Worker /* audit type is merely sanity checked by xt_AUDIT.ko,
89*a71a9546SAutomerger Merge Worker * so nftables doesn't even support it */
90*a71a9546SAutomerger Merge Worker
91*a71a9546SAutomerger Merge Worker xt_xlate_add(xl, "log level audit");
92*a71a9546SAutomerger Merge Worker return 1;
93*a71a9546SAutomerger Merge Worker }
94*a71a9546SAutomerger Merge Worker
95*a71a9546SAutomerger Merge Worker static struct xtables_target audit_tg_reg = {
96*a71a9546SAutomerger Merge Worker .name = "AUDIT",
97*a71a9546SAutomerger Merge Worker .version = XTABLES_VERSION,
98*a71a9546SAutomerger Merge Worker .family = NFPROTO_UNSPEC,
99*a71a9546SAutomerger Merge Worker .size = XT_ALIGN(sizeof(struct xt_audit_info)),
100*a71a9546SAutomerger Merge Worker .userspacesize = XT_ALIGN(sizeof(struct xt_audit_info)),
101*a71a9546SAutomerger Merge Worker .help = audit_help,
102*a71a9546SAutomerger Merge Worker .print = audit_print,
103*a71a9546SAutomerger Merge Worker .save = audit_save,
104*a71a9546SAutomerger Merge Worker .x6_parse = audit_parse,
105*a71a9546SAutomerger Merge Worker .x6_options = audit_opts,
106*a71a9546SAutomerger Merge Worker .xlate = audit_xlate,
107*a71a9546SAutomerger Merge Worker };
108*a71a9546SAutomerger Merge Worker
_init(void)109*a71a9546SAutomerger Merge Worker void _init(void)
110*a71a9546SAutomerger Merge Worker {
111*a71a9546SAutomerger Merge Worker xtables_register_target(&audit_tg_reg);
112*a71a9546SAutomerger Merge Worker }
113