Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 26 Feb 2009 10:57:13 +0000 (GMT)
From:      Robert Watson <rwatson@FreeBSD.org>
To:        src-committers@freebsd.org, svn-src-all@freebsd.org,  svn-src-head@freebsd.org
Subject:   Re: svn commit: r189063 - head/sys/kern
Message-ID:  <alpine.BSF.2.00.0902261056280.16988@fledge.watson.org>
In-Reply-To: <200902261056.n1QAuDTL025375@svn.freebsd.org>
References:  <200902261056.n1QAuDTL025375@svn.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 26 Feb 2009, Robert Watson wrote:

> Log:
>  Add static tracing for privilege checking:
>
>    priv:kernel:priv_check:priv_ok fires for granted privileges
>    priv:kernel:priv_check:priv_errr fires for denied privileges
>
>  The first argument is the requested privilege number.  The naming
>  convention is a little different from the OpenSolaris equivilent
>  because we can't have '-' in probefunc names, and our privilege
>  namespace is different.

A typical tracing command might be:

   dtrace -n 'priv:::priv_ok { trace(execname); trace(arg0);}'

arg0 requires manual interpretation using /usr/include/sys/priv.h.

Robert N M Watson
Computer Laboratory
University of Cambridge



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.BSF.2.00.0902261056280.16988>