From owner-cvs-all@FreeBSD.ORG Sun Sep 3 09:22:14 2006 Return-Path: X-Original-To: cvs-all@FreeBSD.org Delivered-To: cvs-all@FreeBSD.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id ACDD116A4DA; Sun, 3 Sep 2006 09:22:14 +0000 (UTC) (envelope-from rwatson@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id EE91F43D58; Sun, 3 Sep 2006 09:22:12 +0000 (GMT) (envelope-from rwatson@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.13.6/8.13.6) with ESMTP id k839M02d074200; Sun, 3 Sep 2006 09:22:00 GMT (envelope-from rwatson@repoman.freebsd.org) Received: (from rwatson@localhost) by repoman.freebsd.org (8.13.6/8.13.4/Submit) id k839M0T6074199; Sun, 3 Sep 2006 09:22:00 GMT (envelope-from rwatson) Message-Id: <200609030922.k839M0T6074199@repoman.freebsd.org> From: Robert Watson Date: Sun, 3 Sep 2006 09:22:00 +0000 (UTC) To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: RELENG_6 Cc: Subject: cvs commit: src/sys/kern kern_acct.c kern_exec.c vfs_mount.c X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 03 Sep 2006 09:22:14 -0000 rwatson 2006-09-03 09:21:59 UTC FreeBSD src repository Modified files: (Branch: RELENG_6) sys/kern kern_acct.c kern_exec.c vfs_mount.c Log: Merge kern_exec.c:1.293,1.295, kern_acct.c:1.82, vfs_mount.c:1.227 from HEAD to RELENG_6: In execve(), audit the path name being executed. In the future, it would also be good to audit the interpreter pathname, if any. Audit the argv and env vectors passed in on exec: Add the argument auditing functions for argv and env. Add kernel-specific versions of the tokenizer functions for the arg and env represented as a char array. Implement the AUDIT_ARGV and AUDIT_ARGE audit policy commands to enable/disable argv/env auditing. Call the argument auditing from the exec system calls. Audit path passed to the acct() system call. Audit some arguments to nmount(), mount(), umount(). Obtained from: TrustedBSD Project Revision Changes Path 1.74.2.4 +2 -1 src/sys/kern/kern_acct.c 1.275.2.6 +11 -2 src/sys/kern/kern_exec.c 1.196.2.12 +10 -1 src/sys/kern/vfs_mount.c