From owner-freebsd-hackers@FreeBSD.ORG Thu Nov 8 07:48:33 2012 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 4299EA89 for ; Thu, 8 Nov 2012 07:48:33 +0000 (UTC) (envelope-from s.dave.jones@gmail.com) Received: from mail-wg0-f50.google.com (mail-wg0-f50.google.com [74.125.82.50]) by mx1.freebsd.org (Postfix) with ESMTP id C52258FC0C for ; Thu, 8 Nov 2012 07:48:32 +0000 (UTC) Received: by mail-wg0-f50.google.com with SMTP id 16so1639798wgi.31 for ; Wed, 07 Nov 2012 23:48:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=uJI5mTRza52EN53tarLIq6U28fZPiGoqEP9RDXuhX3I=; b=fpbTWr62h+H9MMM6CRyD11H9rcbydrHuEe1y0NjY3rg79NQg54asI8v7zhFJWvdSVg JwcwdO4n6OZmV9t6yUwwUdHvGYwOZv7oLe6WIBJQ+qAIOsH8PcJoiJrlc1oCxWL8Gn8Q Pssdj+KRYxlIJ+uuCIioy4hm54lspMpKyc3H12iRF72y46Bn4cm4DuoTpgmskaIFDlNM z053Vq81obmlxkmHXcEAXIJbsk3kk7mf5Gl91V8o9SZH1tjO+LCRql+ZXMhYBXfZKUkg rnAG9KzVRpRq5yAK6Q60Bha1IJKcyQ+WLogLxaOF2hM/aaXu3K4byx8jKljZWhvINSTR jQYQ== MIME-Version: 1.0 Received: by 10.180.84.202 with SMTP id b10mr11609975wiz.13.1352360911488; Wed, 07 Nov 2012 23:48:31 -0800 (PST) Received: by 10.194.56.233 with HTTP; Wed, 7 Nov 2012 23:48:31 -0800 (PST) Date: Thu, 8 Nov 2012 15:48:31 +0800 Message-ID: Subject: A question about creating a system call From: dave jones To: freebsd-hackers@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Nov 2012 07:48:33 -0000 Hello, I know how to create system calls, but I'm a bit confused about sys/kern/syscalls.master file explained. For example, if I have a foo system call, following code is added: 532 AUE_NULL STD { int foo(char *str); } The question is in column two AUE_NULL, can I replace it with AUE_FOO? How to determine the system call should be audit or not? Thank you. Regards, Dave.