From owner-cvs-src@FreeBSD.ORG Wed Feb 1 20:01:19 2006 Return-Path: X-Original-To: cvs-src@FreeBSD.org Delivered-To: cvs-src@FreeBSD.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id AB15816A420; Wed, 1 Feb 2006 20:01:19 +0000 (GMT) (envelope-from rwatson@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 25E2043D58; Wed, 1 Feb 2006 20:01:19 +0000 (GMT) (envelope-from rwatson@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id k11K1IMe090858; Wed, 1 Feb 2006 20:01:18 GMT (envelope-from rwatson@repoman.freebsd.org) Received: (from rwatson@localhost) by repoman.freebsd.org (8.13.1/8.13.1/Submit) id k11K1IVK090857; Wed, 1 Feb 2006 20:01:18 GMT (envelope-from rwatson) Message-Id: <200602012001.k11K1IVK090857@repoman.freebsd.org> From: Robert Watson Date: Wed, 1 Feb 2006 20:01:18 +0000 (UTC) To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Cc: Subject: cvs commit: src/sys/security/audit audit.c audit.h audit_arg.c audit_bsm.c audit_bsm_klib.c audit_bsm_token.c audit_private.h audit_syscalls.c audit_trigger.c X-BeenThere: cvs-src@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Feb 2006 20:01:19 -0000 rwatson 2006-02-01 20:01:18 UTC FreeBSD src repository Added files: sys/security/audit audit.c audit.h audit_arg.c audit_bsm.c audit_bsm_klib.c audit_bsm_token.c audit_private.h audit_syscalls.c audit_trigger.c Log: Import kernel audit framework: - Management of audit state on processes. - Audit system calls to configure process and system audit state. - Reliable audit record queue implementation, audit_worker kernel thread to asynchronously store records on disk. - Audit event argument. - Internal audit data structure -> BSM audit trail conversion library. - Audit event pre-selection. - Audit pseudo-device permitting kernel->user upcalls to notify auditd of kernel audit events. Much work by: wsalamon Obtained from: TrustedBSD Project, Apple Computer, Inc. Revision Changes Path 1.1 +1083 -0 src/sys/security/audit/audit.c (new) 1.1 +238 -0 src/sys/security/audit/audit.h (new) 1.1 +803 -0 src/sys/security/audit/audit_arg.c (new) 1.1 +1261 -0 src/sys/security/audit/audit_bsm.c (new) 1.1 +538 -0 src/sys/security/audit/audit_bsm_klib.c (new) 1.1 +1181 -0 src/sys/security/audit/audit_bsm_token.c (new) 1.1 +300 -0 src/sys/security/audit/audit_private.h (new) 1.1 +652 -0 src/sys/security/audit/audit_syscalls.c (new) 1.1 +172 -0 src/sys/security/audit/audit_trigger.c (new)