Author: csjp
Date: Sun Jan 31 22:31:01 2010
New Revision: 203328
URL: http://svn.freebsd.org/changeset/base/203328
Log:
Make sure we convert audit records that were produced as the result of the
closefrom(2) syscall.
Modified:
head/sys/security/audit/audit_bsm.c
Modified: head/sys/security/audit/audit_bsm.c
==============================================================================
--- head/sys/security/audit/audit_bsm.c Sun Jan 31 22:21:08 2010
(r203327)
+++ head/sys/security/audit/audit_bsm.c Sun Jan 31 22:31:01 2010
(r203328)
@@ -842,6 +842,13 @@ kaudit_to_bsm(struct kaudit_record *kar,
UPATH1_VNODE1_TOKENS;
break;
+ case AUE_CLOSEFROM:
+ if (ARG_IS_VALID(kar, ARG_FD)) {
+ tok = au_to_arg32(1, "fd", ar->ar_arg_fd);
+ kau_write(rec, tok);
+ }
+ break;
+
case AUE_CORE:
if (ARG_IS_VALID(kar, ARG_SIGNUM)) {
tok = au_to_arg32(1, "signal", ar->ar_arg_signum);
_______________________________________________
svn-src-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/svn-src-all
To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"
