Author: rwatson
Date: Sun Jul 10 11:49:10 2016
New Revision: 302524
URL: https://svnweb.freebsd.org/changeset/base/302524
Log:
When mmap(2) is used with a vnode, capture vnode attributes in the
audit trail. This was not required for Common Criteria auditing
(which requires only that the intent to read or write be audited
at the time of open(2)), but is useful for contemporary live
analysis and forensics.
MFC after: 3 days
Sponsored by: DARPA, AFRL
Modified:
head/sys/vm/vm_mmap.c
Modified: head/sys/vm/vm_mmap.c
==============================================================================
--- head/sys/vm/vm_mmap.c Sun Jul 10 10:53:50 2016 (r302523)
+++ head/sys/vm/vm_mmap.c Sun Jul 10 11:49:10 2016 (r302524)
@@ -1245,6 +1245,7 @@ vm_mmap_vnode(struct thread *td, vm_size
locktype = LK_SHARED;
if ((error = vget(vp, locktype, td)) != 0)
return (error);
+ AUDIT_ARG_VNODE1(vp);
foff = *foffp;
flags = *flagsp;
obj = vp->v_object;
_______________________________________________
svn-src-all@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-all
To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"
