From owner-p4-projects@FreeBSD.ORG  Sun Mar 12 15:25:12 2006
Return-Path: <owner-p4-projects@FreeBSD.ORG>
X-Original-To: p4-projects@freebsd.org
Delivered-To: p4-projects@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 32767)
	id 9C87116A404; Sun, 12 Mar 2006 15:25:11 +0000 (GMT)
X-Original-To: perforce@freebsd.org
Delivered-To: perforce@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 0E2C916A401
	for <perforce@freebsd.org>; Sun, 12 Mar 2006 15:25:11 +0000 (GMT)
	(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP id B24ED43D48
	for <perforce@freebsd.org>; Sun, 12 Mar 2006 15:25:10 +0000 (GMT)
	(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id k2CFPAnN007438
	for <perforce@freebsd.org>; Sun, 12 Mar 2006 15:25:10 GMT
	(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: (from perforce@localhost)
	by repoman.freebsd.org (8.13.1/8.13.1/Submit) id k2CFPAmm007435
	for perforce@freebsd.org; Sun, 12 Mar 2006 15:25:10 GMT
	(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Date: Sun, 12 Mar 2006 15:25:10 GMT
Message-Id: <200603121525.k2CFPAmm007435@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: perforce set sender to
	bb+lists.freebsd.perforce@cyrus.watson.org using -f
From: Robert Watson <rwatson@FreeBSD.org>
To: Perforce Change Reviews <perforce@freebsd.org>
Cc: 
Subject: PERFORCE change 93194 for review
X-BeenThere: p4-projects@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: p4 projects tree changes <p4-projects.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/p4-projects>,
	<mailto:p4-projects-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/p4-projects>
List-Post: <mailto:p4-projects@freebsd.org>
List-Help: <mailto:p4-projects-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/p4-projects>,
	<mailto:p4-projects-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 12 Mar 2006 15:25:12 -0000

http://perforce.freebsd.org/chv.cgi?CH=93194

Change 93194 by rwatson@rwatson_zoo on 2006/03/12 15:24:27

	Add a top-level security.audit sysctl node, which will be present
	regardless of audit compiled in.  User space applications will be
	able to test for the node to decide whether or not to invoke audit
	system calls, which may improve the behavior of applications like
	login when running on older kernels (unsupported, but often used
	configuration).

Affected files ...

.. //depot/projects/trustedbsd/audit3/sys/security/audit/audit_syscalls.c#9 edit

Differences ...

==== //depot/projects/trustedbsd/audit3/sys/security/audit/audit_syscalls.c#9 (text+ko) ====

@@ -30,6 +30,7 @@
 #include <sys/param.h>
 #include <sys/namei.h>
 #include <sys/proc.h>
+#include <sys/sysctl.h>
 #include <sys/sysproto.h>
 #include <sys/systm.h>
 #include <sys/vnode.h>
@@ -39,6 +40,10 @@
 #include <security/audit/audit.h>
 #include <security/audit/audit_private.h>
 
+SYSCTL_DECL(_security);
+SYSCTL_NODE(_security, OID_AUTO, audit, CTLFLAG_RW, 0,
+    "TrustedBSD audit controls");
+
 #ifdef AUDIT
 
 /*