Add support for file_getattr and file_setattr syscalls

The file_getattr()/file_setattr() are used to set extended file
attributes. These syscalls take dirfd in conjunction with the pathname
argument. The syscall then operates on inode opened according to
openat(2) semantics.  This is an alternative to
FS_IOC_FSGETXATTR/FS_IOC_FSSETXATTR ioctl with a difference that file
don't need to be open as file can be referenced with a path instead of
fd.

Source: https://lwn.net/Articles/1027795/

Author: Cropi

auparse/interpret.c

@@ -2567,6 +2567,10 @@ static const char* print_a0(auparse_state_t *au, const char* val,
 				return print_dirfd(val);
 			else if (strcmp(sys, "futimensat") == 0)
 				return print_dirfd(val);
+			else if (strcmp(sys, "file_getattr") == 0)
+				return print_dirfd(val);
+			else if (strcmp(sys, "file_setattr") == 0)
+				return print_dirfd(val);
 		}
 		else if (*sys == 'u') {
 			if (strcmp(sys, "unshare") == 0)

auparse/normalize_syscall_map.h

@@ -43,6 +43,7 @@ _S(NORM_FILE_CHATTR, "setxattrat")
 _S(NORM_FILE_CHATTR, "fsetxattr")
 _S(NORM_FILE_CHATTR, "lsetxattr")
 _S(NORM_FILE_CHATTR, "mount_setattr")
+_S(NORM_FILE_CHATTR, "file_setattr")
 _S(NORM_FILE_DIR, "mkdir")
 _S(NORM_FILE_DIR, "mkdirat")
 _S(NORM_FILE_MOUNT, "fsconfig")

lib/aarch64_table.h

@@ -343,3 +343,5 @@ _S(464, "getxattrat")
 _S(465, "listxattrat")
 _S(466, "removexattrat")
 _S(467, "open_tree_attr")
+_S(468, "file_getattr")
+_S(469, "file_setattr")

lib/arm_table.h

@@ -453,3 +453,5 @@ _S(464, "getxattrat")
 _S(465, "listxattrat")
 _S(466, "removexattrat")
 _S(467, "open_tree_attr")
+_S(468, "file_getattr")
+_S(469, "file_setattr")

lib/i386_table.h

@@ -479,3 +479,5 @@ _S(464, "getxattrat")
 _S(465, "listxattrat")
 _S(466, "removexattrat")
 _S(467, "open_tree_attr")
+_S(468, "file_getattr")
+_S(469, "file_setattr")

lib/ppc_table.h

@@ -471,3 +471,5 @@ _S(464, "getxattrat")
 _S(465, "listxattrat")
 _S(466, "removexattrat")
 _S(467, "open_tree_attr")
+_S(468, "file_getattr")
+_S(469, "file_setattr")

lib/riscv32_table.h

@@ -334,3 +334,5 @@ _S(464, "getxattrat")
 _S(465, "listxattrat")
 _S(466, "removexattrat")
 _S(467, "open_tree_attr")
+_S(468, "file_getattr")
+_S(469, "file_setattr")

lib/riscv64_table.h

@@ -344,3 +344,5 @@ _S(464, "getxattrat")
 _S(465, "listxattrat")
 _S(466, "removexattrat")
 _S(467, "open_tree_attr")
+_S(468, "file_getattr")
+_S(469, "file_setattr")

lib/s390_table.h

@@ -460,3 +460,5 @@ _S(464, "getxattrat")
 _S(465, "listxattrat")
 _S(466, "removexattrat")
 _S(467, "open_tree_attr")
+_S(468, "file_getattr")
+_S(469, "file_setattr")

lib/s390x_table.h

@@ -406,3 +406,5 @@ _S(464, "getxattrat")
 _S(465, "listxattrat")
 _S(466, "removexattrat")
 _S(467, "open_tree_attr")
+_S(468, "file_getattr")
+_S(469, "file_setattr")