From owner-p4-projects@FreeBSD.ORG  Sun Nov 30 21:29:58 2008
Return-Path: <owner-p4-projects@FreeBSD.ORG>
Delivered-To: p4-projects@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 32767)
	id A5FE31065677; Sun, 30 Nov 2008 21:29:58 +0000 (UTC)
Delivered-To: perforce@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 697BF1065672
	for <perforce@freebsd.org>; Sun, 30 Nov 2008 21:29:58 +0000 (UTC)
	(envelope-from csjp@freebsd.org)
Received: from repoman.freebsd.org (repoman.freebsd.org
	[IPv6:2001:4f8:fff6::29])
	by mx1.freebsd.org (Postfix) with ESMTP id 585258FC17
	for <perforce@freebsd.org>; Sun, 30 Nov 2008 21:29:58 +0000 (UTC)
	(envelope-from csjp@freebsd.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id mAULTwuF012604
	for <perforce@freebsd.org>; Sun, 30 Nov 2008 21:29:58 GMT
	(envelope-from csjp@freebsd.org)
Received: (from perforce@localhost)
	by repoman.freebsd.org (8.14.3/8.14.3/Submit) id mAULTwhV012602
	for perforce@freebsd.org; Sun, 30 Nov 2008 21:29:58 GMT
	(envelope-from csjp@freebsd.org)
Date: Sun, 30 Nov 2008 21:29:58 GMT
Message-Id: <200811302129.mAULTwhV012602@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: perforce set sender to
	csjp@freebsd.org using -f
From: "Christian S.J. Peron" <csjp@FreeBSD.org>
To: Perforce Change Reviews <perforce@freebsd.org>
Cc: 
Subject: PERFORCE change 153855 for review
X-BeenThere: p4-projects@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: p4 projects tree changes <p4-projects.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/p4-projects>,
	<mailto:p4-projects-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/p4-projects>
List-Post: <mailto:p4-projects@freebsd.org>
List-Help: <mailto:p4-projects-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/p4-projects>,
	<mailto:p4-projects-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 30 Nov 2008 21:29:59 -0000

http://perforce.freebsd.org/chv.cgi?CH=153855

Change 153855 by csjp@hvm02 on 2008/11/30 21:29:16

	Add an event for fstat(2).  Previously, this syscall was not being
	audited.  It should be noted that Solaris disables this by default
	(i.e. audit class of no) but we have added it for class "fa" which
	is file attribute access.

Affected files ...

.. //depot/projects/trustedbsd/openbsm/etc/audit_event#31 edit

Differences ...

==== //depot/projects/trustedbsd/openbsm/etc/audit_event#31 (text+ko) ====

@@ -1,5 +1,5 @@
 #
-# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_event#30 $
+# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_event#31 $
 #
 # The mapping between event identifiers and values is also hard-coded in
 # audit_kevents.h and audit_uevents.h, so changes must occur in both places,
@@ -185,6 +185,7 @@
 205:AUE_SETGID:setgid(2):pc
 206:AUE_READL:readl(2):no
 207:AUE_READVL:readvl(2):no
+208:AUE_FSTAT:fstat(2):fa
 209:AUE_DUP2:dup2(2):no
 210:AUE_MMAP:mmap(2):no
 211:AUE_AUDIT:audit(2):ot