FM / linux

/usr/include/linux

Name	Size	Mode	Actions
android/	-	0755	rm
byteorder/	-	0755	rm
caif/	-	0755	rm
can/	-	0755	rm
cifs/	-	0755	rm
dvb/	-	0755	rm
genwqe/	-	0755	rm
hdlc/	-	0755	rm
hsi/	-	0755	rm
iio/	-	0755	rm
isdn/	-	0755	rm
mmc/	-	0755	rm
netfilter/	-	0755	rm
netfilter_arp/	-	0755	rm
netfilter_bridge/	-	0755	rm
netfilter_ipv4/	-	0755	rm
netfilter_ipv6/	-	0755	rm
nfsd/	-	0755	rm
raid/	-	0755	rm
sched/	-	0755	rm
spi/	-	0755	rm
sunrpc/	-	0755	rm
tc_act/	-	0755	rm
tc_ematch/	-	0755	rm
usb/	-	0755	rm
wimax/	-	0755	rm
a.out.h	6892	0644	edit dl rm
acct.h	3733	0644	edit dl rm
adb.h	1140	0644	edit dl rm
adfs_fs.h	936	0644	edit dl rm
affs_hardblocks.h	1544	0644	edit dl rm
agpgart.h	3940	0644	edit dl rm
aio_abi.h	3417	0644	edit dl rm
am437x-vpfe.h	3681	0644	edit dl rm
apm_bios.h	3683	0644	edit dl rm
arcfb.h	213	0644	edit dl rm
arm_sdei.h	2751	0644	edit dl rm
aspeed-lpc-ctrl.h	1780	0644	edit dl rm
atalk.h	1023	0644	edit dl rm
atm.h	7888	0644	edit dl rm
atmapi.h	952	0644	edit dl rm
atmarp.h	1296	0644	edit dl rm
atmbr2684.h	3271	0644	edit dl rm
atmclip.h	576	0644	edit dl rm
atmdev.h	7677	0644	edit dl rm
atmioc.h	1646	0644	edit dl rm
atmlec.h	2381	0644	edit dl rm
atmmpc.h	4226	0644	edit dl rm
atmppp.h	639	0644	edit dl rm
atmsap.h	4970	0644	edit dl rm
atmsvc.h	1853	0644	edit dl rm
atm_eni.h	648	0644	edit dl rm
atm_he.h	406	0644	edit dl rm
atm_idt77105.h	955	0644	edit dl rm
atm_nicstar.h	1278	0644	edit dl rm
atm_tcp.h	1622	0644	edit dl rm
atm_zatm.h	1540	0644	edit dl rm
audit.h	20394	0644	edit dl rm
auto_dev-ioctl.h	4986	0644	edit dl rm
auto_fs.h	6428	0644	edit dl rm
auto_fs4.h	451	0644	edit dl rm
auxvec.h	1597	0644	edit dl rm
ax25.h	2824	0644	edit dl rm
b1lli.h	1717	0644	edit dl rm
batadv_packet.h	20495	0644	edit dl rm
batman_adv.h	11977	0644	edit dl rm
baycom.h	883	0644	edit dl rm
bcache.h	8366	0644	edit dl rm
bcm933xx_hcs.h	419	0644	edit dl rm
bfs_fs.h	1893	0644	edit dl rm
binfmts.h	628	0644	edit dl rm
blkpg.h	904	0644	edit dl rm
blktrace_api.h	4701	0644	edit dl rm
blkzoned.h	6608	0644	edit dl rm
bpf.h	228660	0644	edit dl rm
bpfilter.h	465	0644	edit dl rm
bpf_common.h	1367	0644	edit dl rm
bpf_perf_event.h	529	0644	edit dl rm
bpqether.h	981	0644	edit dl rm
bsg.h	2494	0644	edit dl rm
bt-bmc.h	572	0644	edit dl rm
btf.h	4796	0644	edit dl rm
btrfs.h	28913	0644	edit dl rm
btrfs_tree.h	25285	0644	edit dl rm
can.h	7881	0644	edit dl rm
capability.h	13521	0644	edit dl rm
capi.h	3124	0644	edit dl rm
cciss_defs.h	3281	0644	edit dl rm
cciss_ioctl.h	2761	0644	edit dl rm
cdrom.h	28859	0644	edit dl rm
cec-funcs.h	53901	0644	edit dl rm
cec.h	37691	0644	edit dl rm
cfm_bridge.h	1456	0644	edit dl rm
cgroupstats.h	2219	0644	edit dl rm
chio.h	5344	0644	edit dl rm
close_range.h	377	0644	edit dl rm
cm4000_cs.h	1806	0644	edit dl rm
cn_proc.h	3456	0644	edit dl rm
coda.h	17505	0644	edit dl rm
coda_psdev.h	783	0644	edit dl rm
coff.h	12476	0644	edit dl rm
connector.h	2253	0644	edit dl rm
const.h	788	0644	edit dl rm
coresight-stm.h	674	0644	edit dl rm
cramfs_fs.h	3555	0644	edit dl rm
cryptouser.h	3392	0644	edit dl rm
cuda.h	905	0644	edit dl rm
cyclades.h	17108	0644	edit dl rm
cycx_cfm.h	2990	0644	edit dl rm
dcbnl.h	25238	0644	edit dl rm
dccp.h	6436	0644	edit dl rm
devlink.h	21556	0644	edit dl rm
dlm.h	2553	0644	edit dl rm
dlmconstants.h	5080	0644	edit dl rm
dlm_device.h	2543	0644	edit dl rm
dlm_netlink.h	1159	0644	edit dl rm
dlm_plock.h	894	0644	edit dl rm
dm-ioctl.h	11400	0644	edit dl rm
dm-log-userspace.h	15191	0644	edit dl rm
dma-buf.h	5247	0644	edit dl rm
dn.h	4642	0644	edit dl rm
dqblk_xfs.h	9245	0644	edit dl rm
edd.h	5604	0644	edit dl rm
efs_fs_sb.h	2227	0644	edit dl rm
elf-em.h	2187	0644	edit dl rm
elf-fdpic.h	1124	0644	edit dl rm
elf.h	13471	0644	edit dl rm
elfcore.h	2995	0644	edit dl rm
errno.h	23	0644	edit dl rm
errqueue.h	1477	0644	edit dl rm
erspan.h	1059	0644	edit dl rm
ethtool.h	83855	0644	edit dl rm
ethtool_netlink.h	22826	0644	edit dl rm
eventpoll.h	2734	0644	edit dl rm
fadvise.h	842	0644	edit dl rm
falloc.h	3584	0644	edit dl rm
fanotify.h	5341	0644	edit dl rm
fb.h	16477	0644	edit dl rm
fcntl.h	4174	0644	edit dl rm
fd.h	11672	0644	edit dl rm
fdreg.h	5420	0644	edit dl rm
fib_rules.h	2036	0644	edit dl rm
fiemap.h	2775	0644	edit dl rm
filter.h	2216	0644	edit dl rm
firewire-cdev.h	43886	0644	edit dl rm
firewire-constants.h	3231	0644	edit dl rm
flat.h	2148	0644	edit dl rm
fou.h	694	0644	edit dl rm
fpga-dfl.h	8728	0644	edit dl rm
fs.h	13424	0644	edit dl rm
fsl_hypervisor.h	7301	0644	edit dl rm
fsmap.h	4393	0644	edit dl rm
fuse.h	23473	0644	edit dl rm
futex.h	4993	0644	edit dl rm
gameport.h	897	0644	edit dl rm
genetlink.h	2175	0644	edit dl rm
gen_stats.h	1526	0644	edit dl rm
gfs2_ondisk.h	14743	0644	edit dl rm
gigaset_dev.h	1442	0644	edit dl rm
gpio.h	6751	0644	edit dl rm
gsmmux.h	1041	0644	edit dl rm
gtp.h	681	0644	edit dl rm
hash_info.h	921	0644	edit dl rm
hdlc.h	637	0644	edit dl rm
hdlcdrv.h	2908	0644	edit dl rm
hdreg.h	22703	0644	edit dl rm
hid.h	1901	0644	edit dl rm
hiddev.h	6345	0644	edit dl rm
hidraw.h	1993	0644	edit dl rm
hpet.h	743	0644	edit dl rm
hsr_netlink.h	1081	0644	edit dl rm
hw_breakpoint.h	742	0644	edit dl rm
hyperv.h	11152	0644	edit dl rm
hysdn_if.h	1382	0644	edit dl rm
i2c-dev.h	2612	0644	edit dl rm
i2c.h	7132	0644	edit dl rm
i2o-dev.h	11555	0644	edit dl rm
i8k.h	1528	0644	edit dl rm
icmp.h	2975	0644	edit dl rm
icmpv6.h	4038	0644	edit dl rm
idxd.h	8417	0644	edit dl rm
if.h	10901	0644	edit dl rm
ife.h	351	0644	edit dl rm
if_addr.h	1886	0644	edit dl rm
if_addrlabel.h	721	0644	edit dl rm
if_alg.h	946	0644	edit dl rm
if_arcnet.h	3717	0644	edit dl rm
if_arp.h	6577	0644	edit dl rm
if_bonding.h	5291	0644	edit dl rm
if_bridge.h	19514	0644	edit dl rm
if_cablemodem.h	986	0644	edit dl rm
if_eql.h	1349	0644	edit dl rm
if_ether.h	8248	0644	edit dl rm
if_fc.h	1738	0644	edit dl rm
if_fddi.h	3748	0644	edit dl rm
if_frad.h	3019	0644	edit dl rm
if_hippi.h	4235	0644	edit dl rm
if_infiniband.h	1245	0644	edit dl rm
if_link.h	31005	0644	edit dl rm
if_ltalk.h	210	0644	edit dl rm
if_macsec.h	5832	0644	edit dl rm
if_packet.h	7919	0644	edit dl rm
if_phonet.h	424	0644	edit dl rm
if_plip.h	660	0644	edit dl rm
if_ppp.h	29	0644	edit dl rm
if_pppol2tp.h	3292	0644	edit dl rm
if_pppox.h	4879	0644	edit dl rm
if_slip.h	872	0644	edit dl rm
if_team.h	2600	0644	edit dl rm
if_tun.h	4098	0644	edit dl rm
if_tunnel.h	4512	0644	edit dl rm
if_vlan.h	1831	0644	edit dl rm
if_x25.h	881	0644	edit dl rm
if_xdp.h	3011	0644	edit dl rm
igmp.h	3064	0644	edit dl rm
ila.h	1246	0644	edit dl rm
in.h	10014	0644	edit dl rm
in6.h	7438	0644	edit dl rm
inet_diag.h	4672	0644	edit dl rm
inotify.h	3292	0644	edit dl rm
input-event-codes.h	28606	0644	edit dl rm
input.h	15985	0644	edit dl rm
in_route.h	936	0644	edit dl rm
ioctl.h	163	0644	edit dl rm
iommu.h	4904	0644	edit dl rm
io_uring.h	6207	0644	edit dl rm
ip.h	4728	0644	edit dl rm
ip6_tunnel.h	1953	0644	edit dl rm
ipc.h	2101	0644	edit dl rm
ipmi.h	15442	0644	edit dl rm
ipmi_bmc.h	464	0644	edit dl rm
ipmi_msgdefs.h	3430	0644	edit dl rm
ipmi_ssif_bmc.h	441	0644	edit dl rm
ipsec.h	947	0644	edit dl rm
ipv6.h	3967	0644	edit dl rm
ipv6_route.h	1908	0644	edit dl rm
ipx.h	2347	0644	edit dl rm
ip_vs.h	13631	0644	edit dl rm
irqnr.h	104	0644	edit dl rm
isdn.h	5774	0644	edit dl rm
isdnif.h	2370	0644	edit dl rm
isdn_divertif.h	1200	0644	edit dl rm
isdn_ppp.h	1923	0644	edit dl rm
iso_fs.h	6485	0644	edit dl rm
isst_if.h	5384	0644	edit dl rm
ivtv.h	3022	0644	edit dl rm
ivtvfb.h	1207	0644	edit dl rm
jffs2.h	7018	0644	edit dl rm
joystick.h	3434	0644	edit dl rm
kcm.h	822	0644	edit dl rm
kcmp.h	522	0644	edit dl rm
kcov.h	1099	0644	edit dl rm
kd.h	6253	0644	edit dl rm
kdev_t.h	383	0644	edit dl rm
kernel-page-flags.h	900	0644	edit dl rm
kernel.h	438	0644	edit dl rm
kernelcapi.h	1019	0644	edit dl rm
kexec.h	1835	0644	edit dl rm
keyboard.h	12783	0644	edit dl rm
keyctl.h	3500	0644	edit dl rm
kfd_ioctl.h	28814	0644	edit dl rm
kfd_sysfs.h	4350	0644	edit dl rm
kvm.h	61561	0644	edit dl rm
kvm_para.h	1001	0644	edit dl rm
l2tp.h	5591	0644	edit dl rm
libc-compat.h	8289	0644	edit dl rm
lightnvm.h	5042	0644	edit dl rm
limits.h	937	0644	edit dl rm
lirc.h	7813	0644	edit dl rm
llc.h	3164	0644	edit dl rm
loop.h	3497	0644	edit dl rm
lp.h	4190	0644	edit dl rm
lwtunnel.h	2179	0644	edit dl rm
magic.h	3531	0644	edit dl rm
major.h	4713	0644	edit dl rm
map_to_7segment.h	7251	0644	edit dl rm
matroxfb.h	1464	0644	edit dl rm
max2175.h	1035	0644	edit dl rm
mdio.h	17272	0644	edit dl rm
media-bus-format.h	6411	0644	edit dl rm
media.h	11382	0644	edit dl rm
mei.h	3475	0644	edit dl rm
membarrier.h	7899	0644	edit dl rm
memfd.h	1324	0644	edit dl rm
mempolicy.h	2231	0644	edit dl rm
meye.h	2529	0644	edit dl rm
mic_common.h	6519	0644	edit dl rm
mic_ioctl.h	2252	0644	edit dl rm
mii.h	9496	0644	edit dl rm
minix_fs.h	2122	0644	edit dl rm
mman.h	1385	0644	edit dl rm
mmtimer.h	2117	0644	edit dl rm
module.h	255	0644	edit dl rm
mount.h	4546	0644	edit dl rm
mpls.h	2302	0644	edit dl rm
mpls_iptunnel.h	761	0644	edit dl rm
mptcp.h	5608	0644	edit dl rm
mqueue.h	2201	0644	edit dl rm
mroute.h	5427	0644	edit dl rm
mroute6.h	4577	0644	edit dl rm
mrp_bridge.h	1708	0644	edit dl rm
msdos_fs.h	6963	0644	edit dl rm
msg.h	3374	0644	edit dl rm
mtio.h	8175	0644	edit dl rm
nbd-netlink.h	2408	0644	edit dl rm
nbd.h	3024	0644	edit dl rm
ncsi.h	3880	0644	edit dl rm
ndctl.h	6866	0644	edit dl rm
neighbour.h	5138	0644	edit dl rm
net.h	2085	0644	edit dl rm
netconf.h	614	0644	edit dl rm
netdevice.h	2253	0644	edit dl rm
netfilter.h	1820	0644	edit dl rm
netfilter_arp.h	445	0644	edit dl rm
netfilter_bridge.h	1168	0644	edit dl rm
netfilter_decnet.h	1979	0644	edit dl rm
netfilter_ipv4.h	2169	0644	edit dl rm
netfilter_ipv6.h	2189	0644	edit dl rm
netlink.h	11495	0644	edit dl rm
netlink_diag.h	1524	0644	edit dl rm
netrom.h	807	0644	edit dl rm
net_dropmon.h	2922	0644	edit dl rm
net_namespace.h	715	0644	edit dl rm
net_tstamp.h	5806	0644	edit dl rm
nexthop.h	1534	0644	edit dl rm
nfc.h	11209	0644	edit dl rm
nfs.h	4500	0644	edit dl rm
nfs2.h	1468	0644	edit dl rm
nfs3.h	2453	0644	edit dl rm
nfs4.h	6599	0644	edit dl rm
nfs4_mount.h	1932	0644	edit dl rm
nfsacl.h	718	0644	edit dl rm
nfs_fs.h	1641	0644	edit dl rm
nfs_idmap.h	2243	0644	edit dl rm
nfs_mount.h	2142	0644	edit dl rm
nilfs2_api.h	7589	0644	edit dl rm
nilfs2_ondisk.h	18033	0644	edit dl rm
nitro_enclaves.h	13152	0644	edit dl rm
nl80211.h	335264	0644	edit dl rm
nsfs.h	639	0644	edit dl rm
nubus.h	8191	0644	edit dl rm
nvme_ioctl.h	2112	0644	edit dl rm
nvram.h	532	0644	edit dl rm
n_r3964.h	2410	0644	edit dl rm
omap3isp.h	20853	0644	edit dl rm
omapfb.h	5918	0644	edit dl rm
oom.h	511	0644	edit dl rm
openat2.h	1289	0644	edit dl rm
openvswitch.h	40184	0644	edit dl rm
packet_diag.h	1672	0644	edit dl rm
param.h	141	0644	edit dl rm
parport.h	3644	0644	edit dl rm
patchkey.h	892	0644	edit dl rm
pci.h	1380	0644	edit dl rm
pcitest.h	711	0644	edit dl rm
pci_regs.h	57827	0644	edit dl rm
perf_event.h	40580	0644	edit dl rm
personality.h	2097	0644	edit dl rm
pfkeyv2.h	10569	0644	edit dl rm
pfrut.h	7987	0644	edit dl rm
pg.h	2394	0644	edit dl rm
phantom.h	1654	0644	edit dl rm
phonet.h	4677	0644	edit dl rm
pktcdvd.h	2687	0644	edit dl rm
pkt_cls.h	18511	0644	edit dl rm
pkt_sched.h	30296	0644	edit dl rm
pmu.h	5319	0644	edit dl rm
poll.h	22	0644	edit dl rm
posix_acl.h	1254	0644	edit dl rm
posix_acl_xattr.h	1115	0644	edit dl rm
posix_types.h	1098	0644	edit dl rm
ppdev.h	3211	0644	edit dl rm
ppp-comp.h	2527	0644	edit dl rm
ppp-ioctl.h	5475	0644	edit dl rm
ppp_defs.h	5107	0644	edit dl rm
pps.h	4734	0644	edit dl rm
pr.h	1073	0644	edit dl rm
prctl.h	8023	0644	edit dl rm
psample.h	2271	0644	edit dl rm
psci.h	4328	0644	edit dl rm
psp-sev.h	4586	0644	edit dl rm
ptp_clock.h	7456	0644	edit dl rm
ptrace.h	3674	0644	edit dl rm
qemu_fw_cfg.h	2469	0644	edit dl rm
qnx4_fs.h	2328	0644	edit dl rm
qnxtypes.h	624	0644	edit dl rm
qrtr.h	893	0644	edit dl rm
quota.h	6291	0644	edit dl rm
radeonfb.h	360	0644	edit dl rm
random.h	1370	0644	edit dl rm
raw.h	365	0644	edit dl rm
rds.h	9301	0644	edit dl rm
reboot.h	1343	0644	edit dl rm
reiserfs_fs.h	775	0644	edit dl rm
reiserfs_xattr.h	533	0644	edit dl rm
resource.h	2347	0644	edit dl rm
rfkill.h	6608	0644	edit dl rm
rio_cm_cdev.h	3248	0644	edit dl rm
rio_mport_cdev.h	9330	0644	edit dl rm
romfs_fs.h	1238	0644	edit dl rm
rose.h	2232	0644	edit dl rm
route.h	2332	0644	edit dl rm
rpmsg.h	544	0644	edit dl rm
rseq.h	4904	0644	edit dl rm
rtc.h	4009	0644	edit dl rm
rtnetlink.h	20201	0644	edit dl rm
rxrpc.h	5080	0644	edit dl rm
scc.h	4597	0644	edit dl rm
sched.h	2797	0644	edit dl rm
scif_ioctl.h	6382	0644	edit dl rm
screen_info.h	2479	0644	edit dl rm
sctp.h	35994	0644	edit dl rm
sdla.h	2839	0644	edit dl rm
seccomp.h	2257	0644	edit dl rm
securebits.h	2704	0644	edit dl rm
sed-opal.h	3275	0644	edit dl rm
seg6.h	1170	0644	edit dl rm
seg6_genl.h	589	0644	edit dl rm
seg6_hmac.h	423	0644	edit dl rm
seg6_iptunnel.h	927	0644	edit dl rm
seg6_local.h	2060	0644	edit dl rm
selinux_netlink.h	1195	0644	edit dl rm
sem.h	3043	0644	edit dl rm
serial.h	3866	0644	edit dl rm
serial_core.h	6245	0644	edit dl rm
serial_reg.h	15496	0644	edit dl rm
serio.h	2037	0644	edit dl rm
sev-guest.h	2303	0644	edit dl rm
shm.h	3785	0644	edit dl rm
signal.h	388	0644	edit dl rm
signalfd.h	1233	0644	edit dl rm
smc.h	8513	0644	edit dl rm
smc_diag.h	2728	0644	edit dl rm
smiapp.h	1058	0644	edit dl rm
snmp.h	13663	0644	edit dl rm
socket.h	901	0644	edit dl rm
sockios.h	6106	0644	edit dl rm
sock_diag.h	1301	0644	edit dl rm
sonet.h	2290	0644	edit dl rm
sonypi.h	5309	0644	edit dl rm
sound.h	1237	0644	edit dl rm
soundcard.h	46038	0644	edit dl rm
stat.h	6352	0644	edit dl rm
stddef.h	1532	0644	edit dl rm
stm.h	1275	0644	edit dl rm
string.h	238	0644	edit dl rm
suspend_ioctls.h	1431	0644	edit dl rm
swab.h	6921	0644	edit dl rm
switchtec_ioctl.h	5262	0644	edit dl rm
synclink.h	8985	0644	edit dl rm
sync_file.h	2883	0644	edit dl rm
sysctl.h	25842	0644	edit dl rm
sysinfo.h	1049	0644	edit dl rm
target_core_user.h	4633	0644	edit dl rm
taskstats.h	7180	0644	edit dl rm
tcp.h	9920	0644	edit dl rm
tcp_metrics.h	1549	0644	edit dl rm
tdx-guest.h	1305	0644	edit dl rm
tee.h	13165	0644	edit dl rm
termios.h	506	0644	edit dl rm
thermal.h	3309	0644	edit dl rm
time.h	1748	0644	edit dl rm
timerfd.h	936	0644	edit dl rm
times.h	278	0644	edit dl rm
timex.h	6403	0644	edit dl rm
time_types.h	1175	0644	edit dl rm
tiocl.h	1729	0644	edit dl rm
tipc.h	8825	0644	edit dl rm
tipc_config.h	14708	0644	edit dl rm
tipc_netlink.h	9395	0644	edit dl rm
tipc_sockets_diag.h	468	0644	edit dl rm
tls.h	4288	0644	edit dl rm
toshiba.h	1930	0644	edit dl rm
tty.h	1585	0644	edit dl rm
tty_flags.h	4527	0644	edit dl rm
types.h	1476	0644	edit dl rm
udf_fs_i.h	697	0644	edit dl rm
udp.h	1661	0644	edit dl rm
uhid.h	4648	0644	edit dl rm
uinput.h	9261	0644	edit dl rm
uio.h	732	0644	edit dl rm
uleds.h	798	0644	edit dl rm
ultrasound.h	4562	0644	edit dl rm
un.h	384	0644	edit dl rm
unistd.h	220	0644	edit dl rm
unix_diag.h	1253	0644	edit dl rm
usbdevice_fs.h	8317	0644	edit dl rm
usbip.h	640	0644	edit dl rm
userfaultfd.h	7774	0644	edit dl rm
userio.h	1516	0644	edit dl rm
utime.h	215	0644	edit dl rm
utsname.h	669	0644	edit dl rm
uuid.h	1356	0644	edit dl rm
uvcvideo.h	2635	0644	edit dl rm
v4l2-common.h	4177	0644	edit dl rm
v4l2-controls.h	51777	0644	edit dl rm
v4l2-dv-timings.h	31562	0644	edit dl rm
v4l2-mediabus.h	5101	0644	edit dl rm
v4l2-subdev.h	6096	0644	edit dl rm
vboxguest.h	8729	0644	edit dl rm
vbox_err.h	7257	0644	edit dl rm
vbox_vmmdev_types.h	8356	0644	edit dl rm
vdpa.h	1421	0644	edit dl rm
version.h	431	0644	edit dl rm
veth.h	224	0644	edit dl rm
vfio.h	52223	0644	edit dl rm
vfio_ccw.h	1317	0644	edit dl rm
vfio_zdev.h	2542	0644	edit dl rm
vhost.h	6418	0644	edit dl rm
vhost_types.h	3997	0644	edit dl rm
videodev2.h	90741	0644	edit dl rm
virtio_9p.h	2041	0644	edit dl rm
virtio_balloon.h	5274	0644	edit dl rm
virtio_blk.h	6797	0644	edit dl rm
virtio_bt.h	772	0644	edit dl rm
virtio_config.h	4005	0644	edit dl rm
virtio_console.h	3136	0644	edit dl rm
virtio_crypto.h	13874	0644	edit dl rm
virtio_fs.h	572	0644	edit dl rm
virtio_gpu.h	11454	0644	edit dl rm
virtio_ids.h	3269	0644	edit dl rm
virtio_input.h	2506	0644	edit dl rm
virtio_iommu.h	3783	0644	edit dl rm
virtio_mem.h	7157	0644	edit dl rm
virtio_mmio.h	4969	0644	edit dl rm
virtio_net.h	10549	0644	edit dl rm
virtio_pci.h	7406	0644	edit dl rm
virtio_ring.h	7497	0644	edit dl rm
virtio_rng.h	265	0644	edit dl rm
virtio_scsi.h	6035	0644	edit dl rm
virtio_snd.h	9304	0644	edit dl rm
virtio_types.h	2153	0644	edit dl rm
virtio_vsock.h	3086	0644	edit dl rm
vmcore.h	431	0644	edit dl rm
vm_sockets.h	6494	0644	edit dl rm
vm_sockets_diag.h	963	0644	edit dl rm
vsockmon.h	1885	0644	edit dl rm
vt.h	3059	0644	edit dl rm
vtpm_proxy.h	1719	0644	edit dl rm
wait.h	682	0644	edit dl rm
wanrouter.h	453	0644	edit dl rm
watchdog.h	2335	0644	edit dl rm
wimax.h	8371	0644	edit dl rm
wireless.h	42703	0644	edit dl rm
wmi.h	1886	0644	edit dl rm
x25.h	3562	0644	edit dl rm
xattr.h	2860	0644	edit dl rm
xdp_diag.h	1468	0644	edit dl rm
xfrm.h	11994	0644	edit dl rm
xilinx-v4l2-controls.h	2976	0644	edit dl rm
zorro.h	3296	0644	edit dl rm
zorro_ids.h	29963	0644	edit dl rm

Edit: /usr/include/linux/audit.h (20394B)

/* SPDX-License-Identifier: GPL-2.0+ WITH Linux-syscall-note */
/* audit.h -- Auditing support
 *
 * Copyright 2003-2004 Red Hat Inc., Durham, North Carolina.
 * All Rights Reserved.
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 *
 * Written by Rickard E. (Rik) Faith <faith@redhat.com>
 *
 */

#ifndef _LINUX_AUDIT_H_
#define _LINUX_AUDIT_H_

#include <linux/types.h>
#include <linux/elf-em.h>

/* The netlink messages for the audit system is divided into blocks:
 * 1000 - 1099 are for commanding the audit system
 * 1100 - 1199 user space trusted application messages
 * 1200 - 1299 messages internal to the audit daemon
 * 1300 - 1399 audit event messages
 * 1400 - 1499 SE Linux use
 * 1500 - 1599 kernel LSPP events
 * 1600 - 1699 kernel crypto events
 * 1700 - 1799 kernel anomaly records
 * 1800 - 1899 kernel integrity events
 * 1900 - 1999 future kernel use
 * 2000 is for otherwise unclassified kernel audit messages (legacy)
 * 2001 - 2099 unused (kernel)
 * 2100 - 2199 user space anomaly records
 * 2200 - 2299 user space actions taken in response to anomalies
 * 2300 - 2399 user space generated LSPP events
 * 2400 - 2499 user space crypto events
 * 2500 - 2999 future user space (maybe integrity labels and related events)
 *
 * Messages from 1000-1199 are bi-directional. 1200-1299 & 2100 - 2999 are
 * exclusively user space. 1300-2099 is kernel --> user space
 * communication.
 */
#define AUDIT_GET		1000	/* Get status */
#define AUDIT_SET		1001	/* Set status (enable/disable/auditd) */
#define AUDIT_LIST		1002	/* List syscall rules -- deprecated */
#define AUDIT_ADD		1003	/* Add syscall rule -- deprecated */
#define AUDIT_DEL		1004	/* Delete syscall rule -- deprecated */
#define AUDIT_USER		1005	/* Message from userspace -- deprecated */
#define AUDIT_LOGIN		1006	/* Define the login id and information */
#define AUDIT_WATCH_INS		1007	/* Insert file/dir watch entry */
#define AUDIT_WATCH_REM		1008	/* Remove file/dir watch entry */
#define AUDIT_WATCH_LIST	1009	/* List all file/dir watches */
#define AUDIT_SIGNAL_INFO	1010	/* Get info about sender of signal to auditd */
#define AUDIT_ADD_RULE		1011	/* Add syscall filtering rule */
#define AUDIT_DEL_RULE		1012	/* Delete syscall filtering rule */
#define AUDIT_LIST_RULES	1013	/* List syscall filtering rules */
#define AUDIT_TRIM		1014	/* Trim junk from watched tree */
#define AUDIT_MAKE_EQUIV	1015	/* Append to watched tree */
#define AUDIT_TTY_GET		1016	/* Get TTY auditing status */
#define AUDIT_TTY_SET		1017	/* Set TTY auditing status */
#define AUDIT_SET_FEATURE	1018	/* Turn an audit feature on or off */
#define AUDIT_GET_FEATURE	1019	/* Get which features are enabled */

#define AUDIT_FIRST_USER_MSG	1100	/* Userspace messages mostly uninteresting to kernel */
#define AUDIT_USER_AVC		1107	/* We filter this differently */
#define AUDIT_USER_TTY		1124	/* Non-ICANON TTY input meaning */
#define AUDIT_LAST_USER_MSG	1199
#define AUDIT_FIRST_USER_MSG2	2100	/* More user space messages */
#define AUDIT_LAST_USER_MSG2	2999

#define AUDIT_DAEMON_START      1200    /* Daemon startup record */
#define AUDIT_DAEMON_END        1201    /* Daemon normal stop record */
#define AUDIT_DAEMON_ABORT      1202    /* Daemon error stop record */
#define AUDIT_DAEMON_CONFIG     1203    /* Daemon config change */

#define AUDIT_SYSCALL		1300	/* Syscall event */
/* #define AUDIT_FS_WATCH	1301	 * Deprecated */
#define AUDIT_PATH		1302	/* Filename path information */
#define AUDIT_IPC		1303	/* IPC record */
#define AUDIT_SOCKETCALL	1304	/* sys_socketcall arguments */
#define AUDIT_CONFIG_CHANGE	1305	/* Audit system configuration change */
#define AUDIT_SOCKADDR		1306	/* sockaddr copied as syscall arg */
#define AUDIT_CWD		1307	/* Current working directory */
#define AUDIT_EXECVE		1309	/* execve arguments */
#define AUDIT_IPC_SET_PERM	1311	/* IPC new permissions record type */
#define AUDIT_MQ_OPEN		1312	/* POSIX MQ open record type */
#define AUDIT_MQ_SENDRECV	1313	/* POSIX MQ send/receive record type */
#define AUDIT_MQ_NOTIFY		1314	/* POSIX MQ notify record type */
#define AUDIT_MQ_GETSETATTR	1315	/* POSIX MQ get/set attribute record type */
#define AUDIT_KERNEL_OTHER	1316	/* For use by 3rd party modules */
#define AUDIT_FD_PAIR		1317    /* audit record for pipe/socketpair */
#define AUDIT_OBJ_PID		1318	/* ptrace target */
#define AUDIT_TTY		1319	/* Input on an administrative TTY */
#define AUDIT_EOE		1320	/* End of multi-record event */
#define AUDIT_BPRM_FCAPS	1321	/* Information about fcaps increasing perms */
#define AUDIT_CAPSET		1322	/* Record showing argument to sys_capset */
#define AUDIT_MMAP		1323	/* Record showing descriptor and flags in mmap */
#define AUDIT_NETFILTER_PKT	1324	/* Packets traversing netfilter chains */
#define AUDIT_NETFILTER_CFG	1325	/* Netfilter chain modifications */
#define AUDIT_SECCOMP		1326	/* Secure Computing event */
#define AUDIT_PROCTITLE		1327	/* Proctitle emit event */
#define AUDIT_FEATURE_CHANGE	1328	/* audit log listing feature changes */
#define AUDIT_REPLACE		1329	/* Replace auditd if this packet unanswerd */
#define AUDIT_KERN_MODULE	1330	/* Kernel Module events */
#define AUDIT_FANOTIFY		1331	/* Fanotify access decision */
#define AUDIT_TIME_INJOFFSET	1332	/* Timekeeping offset injected */
#define AUDIT_TIME_ADJNTPVAL	1333	/* NTP value adjustment */
#define AUDIT_BPF		1334	/* BPF subsystem */
#define AUDIT_EVENT_LISTENER	1335	/* Task joined multicast read socket */
#define AUDIT_OPENAT2		1337	/* Record showing openat2 how args */

#define AUDIT_AVC		1400	/* SE Linux avc denial or grant */
#define AUDIT_SELINUX_ERR	1401	/* Internal SE Linux Errors */
#define AUDIT_AVC_PATH		1402	/* dentry, vfsmount pair from avc */
#define AUDIT_MAC_POLICY_LOAD	1403	/* Policy file load */
#define AUDIT_MAC_STATUS	1404	/* Changed enforcing,permissive,off */
#define AUDIT_MAC_CONFIG_CHANGE	1405	/* Changes to booleans */
#define AUDIT_MAC_UNLBL_ALLOW	1406	/* NetLabel: allow unlabeled traffic */
#define AUDIT_MAC_CIPSOV4_ADD	1407	/* NetLabel: add CIPSOv4 DOI entry */
#define AUDIT_MAC_CIPSOV4_DEL	1408	/* NetLabel: del CIPSOv4 DOI entry */
#define AUDIT_MAC_MAP_ADD	1409	/* NetLabel: add LSM domain mapping */
#define AUDIT_MAC_MAP_DEL	1410	/* NetLabel: del LSM domain mapping */
#define AUDIT_MAC_IPSEC_ADDSA	1411	/* Not used */
#define AUDIT_MAC_IPSEC_DELSA	1412	/* Not used  */
#define AUDIT_MAC_IPSEC_ADDSPD	1413	/* Not used */
#define AUDIT_MAC_IPSEC_DELSPD	1414	/* Not used */
#define AUDIT_MAC_IPSEC_EVENT	1415	/* Audit an IPSec event */
#define AUDIT_MAC_UNLBL_STCADD	1416	/* NetLabel: add a static label */
#define AUDIT_MAC_UNLBL_STCDEL	1417	/* NetLabel: del a static label */
#define AUDIT_MAC_CALIPSO_ADD	1418	/* NetLabel: add CALIPSO DOI entry */
#define AUDIT_MAC_CALIPSO_DEL	1419	/* NetLabel: del CALIPSO DOI entry */

#define AUDIT_FIRST_KERN_ANOM_MSG   1700
#define AUDIT_LAST_KERN_ANOM_MSG    1799
#define AUDIT_ANOM_PROMISCUOUS      1700 /* Device changed promiscuous mode */
#define AUDIT_ANOM_ABEND            1701 /* Process ended abnormally */
#define AUDIT_ANOM_LINK		    1702 /* Suspicious use of file links */
#define AUDIT_ANOM_CREAT	    1703 /* Suspicious file creation */
#define AUDIT_INTEGRITY_DATA	    1800 /* Data integrity verification */
#define AUDIT_INTEGRITY_METADATA    1801 /* Metadata integrity verification */
#define AUDIT_INTEGRITY_STATUS	    1802 /* Integrity enable status */
#define AUDIT_INTEGRITY_HASH	    1803 /* Integrity HASH type */
#define AUDIT_INTEGRITY_PCR	    1804 /* PCR invalidation msgs */
#define AUDIT_INTEGRITY_RULE	    1805 /* policy rule */
#define AUDIT_INTEGRITY_EVM_XATTR   1806 /* New EVM-covered xattr */
#define AUDIT_INTEGRITY_POLICY_RULE 1807 /* IMA policy rules */

#define AUDIT_KERNEL		2000	/* Asynchronous audit record. NOT A REQUEST. */

/* Rule flags */
#define AUDIT_FILTER_USER	0x00	/* Apply rule to user-generated messages */
#define AUDIT_FILTER_TASK	0x01	/* Apply rule at task creation (not syscall) */
#define AUDIT_FILTER_ENTRY	0x02	/* Apply rule at syscall entry */
#define AUDIT_FILTER_WATCH	0x03	/* Apply rule to file system watches */
#define AUDIT_FILTER_EXIT	0x04	/* Apply rule at syscall exit */
#define AUDIT_FILTER_EXCLUDE	0x05	/* Apply rule before record creation */
#define AUDIT_FILTER_TYPE	AUDIT_FILTER_EXCLUDE /* obsolete misleading naming */
#define AUDIT_FILTER_FS		0x06	/* Apply rule at __audit_inode_child */

#define AUDIT_NR_FILTERS	7

#define AUDIT_FILTER_PREPEND	0x10	/* Prepend to front of list */

/* Rule actions */
#define AUDIT_NEVER    0	/* Do not build context if rule matches */
#define AUDIT_POSSIBLE 1	/* Build context if rule matches  */
#define AUDIT_ALWAYS   2	/* Generate audit record if rule matches */

/* Rule structure sizes -- if these change, different AUDIT_ADD and
 * AUDIT_LIST commands must be implemented. */
#define AUDIT_MAX_FIELDS   64
#define AUDIT_MAX_KEY_LEN  256
#define AUDIT_BITMASK_SIZE 64
#define AUDIT_WORD(nr) ((__u32)((nr)/32))
#define AUDIT_BIT(nr)  (1U << ((nr) - AUDIT_WORD(nr)*32))

#define AUDIT_SYSCALL_CLASSES 16
#define AUDIT_CLASS_DIR_WRITE 0
#define AUDIT_CLASS_DIR_WRITE_32 1
#define AUDIT_CLASS_CHATTR 2
#define AUDIT_CLASS_CHATTR_32 3
#define AUDIT_CLASS_READ 4
#define AUDIT_CLASS_READ_32 5
#define AUDIT_CLASS_WRITE 6
#define AUDIT_CLASS_WRITE_32 7
#define AUDIT_CLASS_SIGNAL 8
#define AUDIT_CLASS_SIGNAL_32 9

/* This bitmask is used to validate user input.  It represents all bits that
 * are currently used in an audit field constant understood by the kernel.
 * If you are adding a new #define AUDIT_<whatever>, please ensure that
 * AUDIT_UNUSED_BITS is updated if need be. */
#define AUDIT_UNUSED_BITS	0x07FFFC00

/* AUDIT_FIELD_COMPARE rule list */
#define AUDIT_COMPARE_UID_TO_OBJ_UID	1
#define AUDIT_COMPARE_GID_TO_OBJ_GID	2
#define AUDIT_COMPARE_EUID_TO_OBJ_UID	3
#define AUDIT_COMPARE_EGID_TO_OBJ_GID	4
#define AUDIT_COMPARE_AUID_TO_OBJ_UID	5
#define AUDIT_COMPARE_SUID_TO_OBJ_UID	6
#define AUDIT_COMPARE_SGID_TO_OBJ_GID	7
#define AUDIT_COMPARE_FSUID_TO_OBJ_UID	8
#define AUDIT_COMPARE_FSGID_TO_OBJ_GID	9

#define AUDIT_COMPARE_UID_TO_AUID	10
#define AUDIT_COMPARE_UID_TO_EUID	11
#define AUDIT_COMPARE_UID_TO_FSUID	12
#define AUDIT_COMPARE_UID_TO_SUID	13

#define AUDIT_COMPARE_AUID_TO_FSUID	14
#define AUDIT_COMPARE_AUID_TO_SUID	15
#define AUDIT_COMPARE_AUID_TO_EUID	16

#define AUDIT_COMPARE_EUID_TO_SUID	17
#define AUDIT_COMPARE_EUID_TO_FSUID	18

#define AUDIT_COMPARE_SUID_TO_FSUID	19

#define AUDIT_COMPARE_GID_TO_EGID	20
#define AUDIT_COMPARE_GID_TO_FSGID	21
#define AUDIT_COMPARE_GID_TO_SGID	22

#define AUDIT_COMPARE_EGID_TO_FSGID	23
#define AUDIT_COMPARE_EGID_TO_SGID	24
#define AUDIT_COMPARE_SGID_TO_FSGID	25

#define AUDIT_MAX_FIELD_COMPARE		AUDIT_COMPARE_SGID_TO_FSGID

/* Rule fields */
				/* These are useful when checking the
				 * task structure at task creation time
				 * (AUDIT_PER_TASK).  */
#define AUDIT_PID	0
#define AUDIT_UID	1
#define AUDIT_EUID	2
#define AUDIT_SUID	3
#define AUDIT_FSUID	4
#define AUDIT_GID	5
#define AUDIT_EGID	6
#define AUDIT_SGID	7
#define AUDIT_FSGID	8
#define AUDIT_LOGINUID	9
#define AUDIT_PERS	10
#define AUDIT_ARCH	11
#define AUDIT_MSGTYPE	12
#define AUDIT_SUBJ_USER	13	/* security label user */
#define AUDIT_SUBJ_ROLE	14	/* security label role */
#define AUDIT_SUBJ_TYPE	15	/* security label type */
#define AUDIT_SUBJ_SEN	16	/* security label sensitivity label */
#define AUDIT_SUBJ_CLR	17	/* security label clearance label */
#define AUDIT_PPID	18
#define AUDIT_OBJ_USER	19
#define AUDIT_OBJ_ROLE	20
#define AUDIT_OBJ_TYPE	21
#define AUDIT_OBJ_LEV_LOW	22
#define AUDIT_OBJ_LEV_HIGH	23
#define AUDIT_LOGINUID_SET	24
#define AUDIT_SESSIONID	25	/* Session ID */
#define AUDIT_FSTYPE	26	/* FileSystem Type */

/* These are ONLY useful when checking
				 * at syscall exit time (AUDIT_AT_EXIT). */
#define AUDIT_DEVMAJOR	100
#define AUDIT_DEVMINOR	101
#define AUDIT_INODE	102
#define AUDIT_EXIT	103
#define AUDIT_SUCCESS   104	/* exit >= 0; value ignored */
#define AUDIT_WATCH	105
#define AUDIT_PERM	106
#define AUDIT_DIR	107
#define AUDIT_FILETYPE	108
#define AUDIT_OBJ_UID	109
#define AUDIT_OBJ_GID	110
#define AUDIT_FIELD_COMPARE	111
#define AUDIT_EXE	112
#define AUDIT_SADDR_FAM	113

#define AUDIT_ARG0      200
#define AUDIT_ARG1      (AUDIT_ARG0+1)
#define AUDIT_ARG2      (AUDIT_ARG0+2)
#define AUDIT_ARG3      (AUDIT_ARG0+3)

#define AUDIT_FILTERKEY	210

#define AUDIT_NEGATE			0x80000000

/* These are the supported operators.
 *	4  2  1  8
 *	=  >  <  ?
 *	----------
 *	0  0  0	 0	00	nonsense
 *	0  0  0	 1	08	&  bit mask
 *	0  0  1	 0	10	<
 *	0  1  0	 0	20	>
 *	0  1  1	 0	30	!=
 *	1  0  0	 0	40	=
 *	1  0  0	 1	48	&=  bit test
 *	1  0  1	 0	50	<=
 *	1  1  0	 0	60	>=
 *	1  1  1	 1	78	all operators
 */
#define AUDIT_BIT_MASK			0x08000000
#define AUDIT_LESS_THAN			0x10000000
#define AUDIT_GREATER_THAN		0x20000000
#define AUDIT_NOT_EQUAL			0x30000000
#define AUDIT_EQUAL			0x40000000
#define AUDIT_BIT_TEST			(AUDIT_BIT_MASK|AUDIT_EQUAL)
#define AUDIT_LESS_THAN_OR_EQUAL	(AUDIT_LESS_THAN|AUDIT_EQUAL)
#define AUDIT_GREATER_THAN_OR_EQUAL	(AUDIT_GREATER_THAN|AUDIT_EQUAL)
#define AUDIT_OPERATORS			(AUDIT_EQUAL|AUDIT_NOT_EQUAL|AUDIT_BIT_MASK)

enum {
	Audit_equal,
	Audit_not_equal,
	Audit_bitmask,
	Audit_bittest,
	Audit_lt,
	Audit_gt,
	Audit_le,
	Audit_ge,
	Audit_bad
};

/* Status symbols */
						/* Mask values */
#define AUDIT_STATUS_ENABLED			0x0001
#define AUDIT_STATUS_FAILURE			0x0002
#define AUDIT_STATUS_PID			0x0004
#define AUDIT_STATUS_RATE_LIMIT		0x0008
#define AUDIT_STATUS_BACKLOG_LIMIT		0x0010
#define AUDIT_STATUS_BACKLOG_WAIT_TIME		0x0020
#define AUDIT_STATUS_LOST			0x0040
#define AUDIT_STATUS_BACKLOG_WAIT_TIME_ACTUAL	0x0080

#define AUDIT_FEATURE_BITMAP_BACKLOG_LIMIT	0x00000001
#define AUDIT_FEATURE_BITMAP_BACKLOG_WAIT_TIME	0x00000002
#define AUDIT_FEATURE_BITMAP_EXECUTABLE_PATH	0x00000004
#define AUDIT_FEATURE_BITMAP_EXCLUDE_EXTEND	0x00000008
#define AUDIT_FEATURE_BITMAP_SESSIONID_FILTER	0x00000010
#define AUDIT_FEATURE_BITMAP_LOST_RESET		0x00000020
#define AUDIT_FEATURE_BITMAP_FILTER_FS		0x00000040

#define AUDIT_FEATURE_BITMAP_ALL (AUDIT_FEATURE_BITMAP_BACKLOG_LIMIT | \
				  AUDIT_FEATURE_BITMAP_BACKLOG_WAIT_TIME | \
				  AUDIT_FEATURE_BITMAP_EXECUTABLE_PATH | \
				  AUDIT_FEATURE_BITMAP_EXCLUDE_EXTEND | \
				  AUDIT_FEATURE_BITMAP_SESSIONID_FILTER | \
				  AUDIT_FEATURE_BITMAP_LOST_RESET | \
				  AUDIT_FEATURE_BITMAP_FILTER_FS)

/* deprecated: AUDIT_VERSION_* */
#define AUDIT_VERSION_LATEST 		AUDIT_FEATURE_BITMAP_ALL
#define AUDIT_VERSION_BACKLOG_LIMIT	AUDIT_FEATURE_BITMAP_BACKLOG_LIMIT
#define AUDIT_VERSION_BACKLOG_WAIT_TIME	AUDIT_FEATURE_BITMAP_BACKLOG_WAIT_TIME

/* Failure-to-log actions */
#define AUDIT_FAIL_SILENT	0
#define AUDIT_FAIL_PRINTK	1
#define AUDIT_FAIL_PANIC	2

/*
 * These bits disambiguate different calling conventions that share an
 * ELF machine type, bitness, and endianness
 */
#define __AUDIT_ARCH_CONVENTION_MASK 0x30000000
#define __AUDIT_ARCH_CONVENTION_MIPS64_N32 0x20000000

/* distinguish syscall tables */
#define __AUDIT_ARCH_64BIT 0x80000000
#define __AUDIT_ARCH_LE	   0x40000000

#define AUDIT_ARCH_AARCH64	(EM_AARCH64|__AUDIT_ARCH_64BIT|__AUDIT_ARCH_LE)
#define AUDIT_ARCH_ALPHA	(EM_ALPHA|__AUDIT_ARCH_64BIT|__AUDIT_ARCH_LE)
#define AUDIT_ARCH_ARM		(EM_ARM|__AUDIT_ARCH_LE)
#define AUDIT_ARCH_ARMEB	(EM_ARM)
#define AUDIT_ARCH_CRIS		(EM_CRIS|__AUDIT_ARCH_LE)
#define AUDIT_ARCH_FRV		(EM_FRV)
#define AUDIT_ARCH_I386		(EM_386|__AUDIT_ARCH_LE)
#define AUDIT_ARCH_IA64		(EM_IA_64|__AUDIT_ARCH_64BIT|__AUDIT_ARCH_LE)
#define AUDIT_ARCH_M32R		(EM_M32R)
#define AUDIT_ARCH_M68K		(EM_68K)
#define AUDIT_ARCH_MICROBLAZE	(EM_MICROBLAZE)
#define AUDIT_ARCH_MIPS		(EM_MIPS)
#define AUDIT_ARCH_MIPSEL	(EM_MIPS|__AUDIT_ARCH_LE)
#define AUDIT_ARCH_MIPS64	(EM_MIPS|__AUDIT_ARCH_64BIT)
#define AUDIT_ARCH_MIPS64N32	(EM_MIPS|__AUDIT_ARCH_64BIT|\
				 __AUDIT_ARCH_CONVENTION_MIPS64_N32)
#define AUDIT_ARCH_MIPSEL64	(EM_MIPS|__AUDIT_ARCH_64BIT|__AUDIT_ARCH_LE)
#define AUDIT_ARCH_MIPSEL64N32	(EM_MIPS|__AUDIT_ARCH_64BIT|__AUDIT_ARCH_LE|\
				 __AUDIT_ARCH_CONVENTION_MIPS64_N32)
#define AUDIT_ARCH_OPENRISC	(EM_OPENRISC)
#define AUDIT_ARCH_PARISC	(EM_PARISC)
#define AUDIT_ARCH_PARISC64	(EM_PARISC|__AUDIT_ARCH_64BIT)
#define AUDIT_ARCH_PPC		(EM_PPC)
/* do not define AUDIT_ARCH_PPCLE since it is not supported by audit */
#define AUDIT_ARCH_PPC64	(EM_PPC64|__AUDIT_ARCH_64BIT)
#define AUDIT_ARCH_PPC64LE	(EM_PPC64|__AUDIT_ARCH_64BIT|__AUDIT_ARCH_LE)
#define AUDIT_ARCH_S390		(EM_S390)
#define AUDIT_ARCH_S390X	(EM_S390|__AUDIT_ARCH_64BIT)
#define AUDIT_ARCH_SH		(EM_SH)
#define AUDIT_ARCH_SHEL		(EM_SH|__AUDIT_ARCH_LE)
#define AUDIT_ARCH_SH64		(EM_SH|__AUDIT_ARCH_64BIT)
#define AUDIT_ARCH_SHEL64	(EM_SH|__AUDIT_ARCH_64BIT|__AUDIT_ARCH_LE)
#define AUDIT_ARCH_SPARC	(EM_SPARC)
#define AUDIT_ARCH_SPARC64	(EM_SPARCV9|__AUDIT_ARCH_64BIT)
#define AUDIT_ARCH_TILEGX	(EM_TILEGX|__AUDIT_ARCH_64BIT|__AUDIT_ARCH_LE)
#define AUDIT_ARCH_TILEGX32	(EM_TILEGX|__AUDIT_ARCH_LE)
#define AUDIT_ARCH_TILEPRO	(EM_TILEPRO|__AUDIT_ARCH_LE)
#define AUDIT_ARCH_X86_64	(EM_X86_64|__AUDIT_ARCH_64BIT|__AUDIT_ARCH_LE)

#define AUDIT_PERM_EXEC		1
#define AUDIT_PERM_WRITE	2
#define AUDIT_PERM_READ		4
#define AUDIT_PERM_ATTR		8

/* MAX_AUDIT_MESSAGE_LENGTH is set in audit:lib/libaudit.h as:
 * 8970 // PATH_MAX*2+CONTEXT_SIZE*2+11+256+1
 * max header+body+tailer: 44 + 29 + 32 + 262 + 7 + pad
 */
#define AUDIT_MESSAGE_TEXT_MAX	8560

/* Multicast Netlink socket groups (default up to 32) */
enum audit_nlgrps {
	AUDIT_NLGRP_NONE,	/* Group 0 not used */
	AUDIT_NLGRP_READLOG,	/* "best effort" read only socket */
	__AUDIT_NLGRP_MAX
};
#define AUDIT_NLGRP_MAX                (__AUDIT_NLGRP_MAX - 1)

struct audit_status {
	__u32		mask;		/* Bit mask for valid entries */
	__u32		enabled;	/* 1 = enabled, 0 = disabled */
	__u32		failure;	/* Failure-to-log action */
	__u32		pid;		/* pid of auditd process */
	__u32		rate_limit;	/* messages rate limit (per second) */
	__u32		backlog_limit;	/* waiting messages limit */
	__u32		lost;		/* messages lost */
	__u32		backlog;	/* messages waiting in queue */
	union {
		__u32	version;	/* deprecated: audit api version num */
		__u32	feature_bitmap;	/* bitmap of kernel audit features */
	};
	__u32		backlog_wait_time;/* message queue wait timeout */
	__u32           backlog_wait_time_actual;/* time spent waiting while
						  * message limit exceeded
						  */
};

struct audit_features {
#define AUDIT_FEATURE_VERSION	1
	__u32	vers;
	__u32	mask;		/* which bits we are dealing with */
	__u32	features;	/* which feature to enable/disable */
	__u32	lock;		/* which features to lock */
};

#define AUDIT_FEATURE_ONLY_UNSET_LOGINUID	0
#define AUDIT_FEATURE_LOGINUID_IMMUTABLE	1
#define AUDIT_LAST_FEATURE			AUDIT_FEATURE_LOGINUID_IMMUTABLE

#define audit_feature_valid(x)		((x) >= 0 && (x) <= AUDIT_LAST_FEATURE)
#define AUDIT_FEATURE_TO_MASK(x)	(1 << ((x) & 31)) /* mask for __u32 */

struct audit_tty_status {
	__u32		enabled;	/* 1 = enabled, 0 = disabled */
	__u32		log_passwd;	/* 1 = enabled, 0 = disabled */
};

#define AUDIT_UID_UNSET (unsigned int)-1
#define AUDIT_SID_UNSET ((unsigned int)-1)

/* audit_rule_data supports filter rules with both integer and string
 * fields.  It corresponds with AUDIT_ADD_RULE, AUDIT_DEL_RULE and
 * AUDIT_LIST_RULES requests.
 */
struct audit_rule_data {
	__u32		flags;	/* AUDIT_PER_{TASK,CALL}, AUDIT_PREPEND */
	__u32		action;	/* AUDIT_NEVER, AUDIT_POSSIBLE, AUDIT_ALWAYS */
	__u32		field_count;
	__u32		mask[AUDIT_BITMASK_SIZE]; /* syscall(s) affected */
	__u32		fields[AUDIT_MAX_FIELDS];
	__u32		values[AUDIT_MAX_FIELDS];
	__u32		fieldflags[AUDIT_MAX_FIELDS];
	__u32		buflen;	/* total length of string fields */
	char		buf[];	/* string fields buffer */
};

#endif /* _LINUX_AUDIT_H_ */

cmd: