Date: Thu, 8 Nov 2012 20:08:12 +0000 (GMT) From: Robert Watson <rwatson@FreeBSD.org> To: dave jones <s.dave.jones@gmail.com> Cc: freebsd-hackers@freebsd.org Subject: Re: A question about creating a system call Message-ID: <alpine.BSF.2.00.1211082007540.59157@fledge.watson.org> In-Reply-To: <CANf5e8Y_zGCHmZfmCbNAx3=4%2BNzinyyVUMgndv%2BpzqvxK4gzxA@mail.gmail.com> References: <CANf5e8Y_zGCHmZfmCbNAx3=4%2BNzinyyVUMgndv%2BpzqvxK4gzxA@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi Dave: This wiki page may be of value: http://wiki.freebsd.org/AddingAuditEvents Robert N M Watson Computer Laboratory University of Cambridge On Thu, 8 Nov 2012, dave jones wrote: > Hello, > > I know how to create system calls, but I'm a bit confused about > sys/kern/syscalls.master file explained. For example, if I have a > foo system call, following code is added: > > 532 AUE_NULL STD { int foo(char *str); } > > The question is in column two AUE_NULL, can I replace it with AUE_FOO? > How to determine the system call should be audit or not? Thank you. > > Regards, > Dave. > _______________________________________________ > freebsd-hackers@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-hackers > To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org" >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.BSF.2.00.1211082007540.59157>