From owner-cvs-all@FreeBSD.ORG  Wed Sep 20 13:23:42 2006
Return-Path: <owner-cvs-all@FreeBSD.ORG>
X-Original-To: cvs-all@FreeBSD.org
Delivered-To: cvs-all@FreeBSD.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 69B2816A4C8;
	Wed, 20 Sep 2006 13:23:42 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 9975843D72;
	Wed, 20 Sep 2006 13:23:40 +0000 (GMT)
	(envelope-from rwatson@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.13.6/8.13.6) with ESMTP id k8KDNetF024436;
	Wed, 20 Sep 2006 13:23:40 GMT
	(envelope-from rwatson@repoman.freebsd.org)
Received: (from rwatson@localhost)
	by repoman.freebsd.org (8.13.6/8.13.4/Submit) id k8KDNeu2024435;
	Wed, 20 Sep 2006 13:23:40 GMT (envelope-from rwatson)
Message-Id: <200609201323.k8KDNeu2024435@repoman.freebsd.org>
From: Robert Watson <rwatson@FreeBSD.org>
Date: Wed, 20 Sep 2006 13:23:40 +0000 (UTC)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Cc: 
Subject: cvs commit: src/sys/security/audit audit_bsm.c
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Sep 2006 13:23:42 -0000

rwatson     2006-09-20 13:23:40 UTC

  FreeBSD src repository

  Modified files:
    sys/security/audit   audit_bsm.c 
  Log:
  Rather than allocating all buffer memory for the completed BSM record
  when allocating the record in the first place, allocate the final buffer
  when closing the BSM record.  At that point, more size information is
  available, so a sufficiently large buffer can be allocated.
  
  This allows the kernel to generate audit records in excess of
  MAXAUDITDATA bytes, but is consistent with Solaris's behavior.  This only
  comes up when auditing command line arguments, in which case we presume
  the administrator really does want the data as they have specified the
  policy flag to gather them.
  
  Obtained from:  TrustedBSD Project
  MFC after:      3 days
  
  Revision  Changes    Path
  1.14      +17 -19    src/sys/security/audit/audit_bsm.c