From owner-svn-src-head@FreeBSD.ORG  Thu Feb 26 10:57:14 2009
Return-Path: <owner-svn-src-head@FreeBSD.ORG>
Delivered-To: svn-src-head@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 898F51065673;
	Thu, 26 Feb 2009 10:57:14 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from cyrus.watson.org (cyrus.watson.org [65.122.17.42])
	by mx1.freebsd.org (Postfix) with ESMTP id 65D3F8FC20;
	Thu, 26 Feb 2009 10:57:14 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from fledge.watson.org (fledge.watson.org [65.122.17.41])
	by cyrus.watson.org (Postfix) with ESMTPS id E906246B45;
	Thu, 26 Feb 2009 05:57:13 -0500 (EST)
Date: Thu, 26 Feb 2009 10:57:13 +0000 (GMT)
From: Robert Watson <rwatson@FreeBSD.org>
X-X-Sender: robert@fledge.watson.org
To: src-committers@freebsd.org, svn-src-all@freebsd.org, 
	svn-src-head@freebsd.org
In-Reply-To: <200902261056.n1QAuDTL025375@svn.freebsd.org>
Message-ID: <alpine.BSF.2.00.0902261056280.16988@fledge.watson.org>
References: <200902261056.n1QAuDTL025375@svn.freebsd.org>
User-Agent: Alpine 2.00 (BSF 1167 2008-08-23)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Cc: 
Subject: Re: svn commit: r189063 - head/sys/kern
X-BeenThere: svn-src-head@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: SVN commit messages for the src tree for head/-current
	<svn-src-head.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/svn-src-head>,
	<mailto:svn-src-head-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/svn-src-head>
List-Post: <mailto:svn-src-head@freebsd.org>
List-Help: <mailto:svn-src-head-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/svn-src-head>,
	<mailto:svn-src-head-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Feb 2009 10:57:15 -0000

On Thu, 26 Feb 2009, Robert Watson wrote:

> Log:
>  Add static tracing for privilege checking:
>
>    priv:kernel:priv_check:priv_ok fires for granted privileges
>    priv:kernel:priv_check:priv_errr fires for denied privileges
>
>  The first argument is the requested privilege number.  The naming
>  convention is a little different from the OpenSolaris equivilent
>  because we can't have '-' in probefunc names, and our privilege
>  namespace is different.

A typical tracing command might be:

   dtrace -n 'priv:::priv_ok { trace(execname); trace(arg0);}'

arg0 requires manual interpretation using /usr/include/sys/priv.h.

Robert N M Watson
Computer Laboratory
University of Cambridge