[PATCH] tests/io_uring: set a filter for the io_uring ops we want to catch

[PATCH] tests/io_uring: set a filter for the io_uring ops we want to catch

[Paul Moore]

Without an explicit io_uring filter in place, we might miss the
io_uring operation if it happens asynchronously.

See the post below for more information, examples, etc.:
https://lore.kernel.org/linux-audit/CAHC9VhRMJq1gJPoR79AxM1JphmGtxhGMYBkd=Ptuaq3WBjX2Bw@mail.gmail.com/

Signed-off-by: Paul Moore <paul@paul-moore.com>
---
 tests/io_uring/test | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tests/io_uring/test b/tests/io_uring/test
index 9eb427a..df13af0 100755
--- a/tests/io_uring/test
+++ b/tests/io_uring/test
@@ -49,6 +49,7 @@ system("auditctl -D >& /dev/null");
 # set our io_uring filters
 system("auditctl -a exit,always -F arch=b$abi_bits -S io_uring_setup -k $key");
 system("auditctl -a exit,always -F arch=b$abi_bits -S io_uring_enter -k $key");
+system("auditctl -a io_uring,always -S openat -k $key");
 
 # run the "t1" test
 system("$basedir/iouring t1");
-- 
2.40.0