Update syscall/arches/audit msg tables for linux 5.16 (#96)

* Update syscall/arches/audit msg tables for linux 5.16

This updates the tables based on kernel 5.16. `go generate` was
run inside of the vagrant box include in the project.

ia64 was deprecated upstream so its removed (and wasn't supported by Go).

* Update CHANGELOG.md

CHANGELOG.md

@@ -11,8 +11,12 @@ This project adheres to [Semantic Versioning](http://semver.org/).
 
 ### Changed
 
+- Update syscall, arches, and audit msg type tables for Linux 5.16. [#96](https://github.com/elastic/go-libaudit/pull/96)
+
 ### Removed
 
+- Removed support for resolving syscall numbers to names for the ia64 architecture. [#96](https://github.com/elastic/go-libaudit/pull/96)
+
 ### Deprecated
 
 ## [2.2.0]

Vagrantfile

@@ -12,7 +12,7 @@ SCRIPT
 install_gvm = <<SCRIPT
 mkdir -p ~/bin
 if [ ! -e "~/bin/gvm" ]; then
-  curl -sL -o ~/bin/gvm https://github.com/andrewkroh/gvm/releases/download/v0.2.2/gvm-linux-amd64
+  curl -sL -o ~/bin/gvm https://github.com/andrewkroh/gvm/releases/download/v0.4.0/gvm-linux-amd64
   chmod +x ~/bin/gvm
   ~/bin/gvm #{GO_VERSION}
   echo 'export GOPATH=$HOME/go' >> ~/.bash_profile

auparse/mk_audit_arches.pl

@@ -17,7 +17,7 @@
 
 my $command = "mk_audit_arches.pl ". join(' ', @ARGV);
 
-`curl -s -O https://github.com/raw/torvalds/linux/v4.16/include/uapi/linux/audit.h`;
+`curl -s -O https://github.com/raw/torvalds/linux/v5.16/include/uapi/linux/audit.h`;
 
 open(GCC, "gcc -E -dD audit.h |") || die "can't run gcc";
 my @arches;
@@ -30,7 +30,7 @@
 close GCC;
 
 # Filter arches not known by compiler.
-@arches = grep {! /(TILE|OPENRISC|ALPHA|MICROBLAZE)/} @arches;
+@arches = grep {! /(TILE|OPENRISC|ALPHA|MICROBLAZE|ARCOMPACT|ARCV2|CSKY|HEXAGON|NDS32|RISCV|UNICORE|XTENSA)/} @arches;
 
 my $outfile = 'defs_audit_arches.go';
 open (FILE, "> $outfile") || die "problem opening $outfile\n";

auparse/mk_audit_exit_codes.go

@@ -135,6 +135,9 @@ func readErrorNumbers() ([]ErrorNumber, error) {
 	}
 
 	sort.Slice(errnos, func(i, j int) bool {
+		if errnos[i].Value == errnos[j].Value {
+			return errnos[i].Name < errnos[j].Name
+		}
 		return errnos[i].Value < errnos[j].Value
 	})
 

auparse/mk_audit_msg_types.go

@@ -159,9 +159,9 @@ var tmpl = template.Must(template.New("message_types").Parse(fileTemplate))
 
 var (
 	headers = []string{
-		`https://github.com/raw/torvalds/linux/v4.16/include/uapi/linux/audit.h`,
-		`https://github.com/raw/linux-audit/audit-userspace/4d933301b1835cafa08b9e9ef705c8fb6c96cb62/lib/libaudit.h`,
-		`https://github.com/raw/linux-audit/audit-userspace/4d933301b1835cafa08b9e9ef705c8fb6c96cb62/lib/msg_typetab.h`,
+		`https://github.com/raw/torvalds/linux/v5.16/include/uapi/linux/audit.h`,
+		`https://github.com/raw/linux-audit/audit-userspace/v3.0.7/lib/libaudit.h`,
+		`https://github.com/raw/linux-audit/audit-userspace/v3.0.7/lib/msg_typetab.h`,
 	}
 )
 

auparse/mk_audit_syscalls.pl

@@ -22,12 +22,11 @@ sub fmt {
     print "\t\t$num: \"$name\",\n";
 }
 
-my $base_url = "https://github.com/raw/linux-audit/audit-userspace/4d933301b1835cafa08b9e9ef705c8fb6c96cb62/lib";
+my $base_url = "https://github.com/raw/linux-audit/audit-userspace/v3.0.7/lib";
 my @tables = (
     "aarch64",
     "arm",
     "i386",
-    "ia64",
     "ppc",
     "s390",
     "s390x",