(cherry pick from commit ae4d928d81)
- Add a klogd to collect the kernel logs and place them into a
new kernel log buffer
- Parse priority, tag and message from the kernel log messages.
- Turn off pruning for worst UID for the kernel log buffer
- Sniff for 'PM: suspend exit', 'PM: suspend enter' and
'Suspended for' messages and correct the internal definition
time correction against monotonic dynamically.
- Discern if we have monotonic or real time (delineation 1980) in
audit messages.
- perform appropriate math to correct the timestamp to be real time
- filter out any external sources of kernel logging
Change-Id: I8d4c7c5ac19f1f3218079ee3a05a50e2ca55f60d
44 lines
1,021 B
Makefile
44 lines
1,021 B
Makefile
LOCAL_PATH:= $(call my-dir)
|
|
|
|
include $(CLEAR_VARS)
|
|
|
|
LOCAL_MODULE:= logd
|
|
|
|
LOCAL_SRC_FILES := \
|
|
main.cpp \
|
|
LogCommand.cpp \
|
|
CommandListener.cpp \
|
|
LogListener.cpp \
|
|
LogReader.cpp \
|
|
FlushCommand.cpp \
|
|
LogBuffer.cpp \
|
|
LogBufferElement.cpp \
|
|
LogTimes.cpp \
|
|
LogStatistics.cpp \
|
|
LogWhiteBlackList.cpp \
|
|
libaudit.c \
|
|
LogAudit.cpp \
|
|
LogKlog.cpp \
|
|
event.logtags
|
|
|
|
LOCAL_SHARED_LIBRARIES := \
|
|
libsysutils \
|
|
liblog \
|
|
libcutils \
|
|
libutils
|
|
|
|
# This is what we want to do:
|
|
# event_logtags = $(shell \
|
|
# sed -n \
|
|
# "s/^\([0-9]*\)[ \t]*$1[ \t].*/-D`echo $1 | tr a-z A-Z`_LOG_TAG=\1/p" \
|
|
# $(LOCAL_PATH)/$2/event.logtags)
|
|
# event_flag := $(call event_logtags,auditd)
|
|
# event_flag += $(call event_logtags,logd)
|
|
# so make sure we do not regret hard-coding it as follows:
|
|
event_flag := -DAUDITD_LOG_TAG=1003 -DLOGD_LOG_TAG=1004
|
|
|
|
LOCAL_CFLAGS := -Werror $(event_flag)
|
|
|
|
include $(BUILD_EXECUTABLE)
|
|
|
|
include $(call first-makefiles-under,$(LOCAL_PATH))
|