From owner-p4-projects@FreeBSD.ORG Wed Oct 24 00:04:57 2007 Return-Path: Delivered-To: p4-projects@freebsd.org Received: by hub.freebsd.org (Postfix, from userid 32767) id CC34516A46B; Wed, 24 Oct 2007 00:04:56 +0000 (UTC) Delivered-To: perforce@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 80E7816A468 for ; Wed, 24 Oct 2007 00:04:56 +0000 (UTC) (envelope-from csjp@freebsd.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id 8128713C465 for ; Wed, 24 Oct 2007 00:04:56 +0000 (UTC) (envelope-from csjp@freebsd.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.1/8.14.1) with ESMTP id l9O04u6a032125 for ; Wed, 24 Oct 2007 00:04:56 GMT (envelope-from csjp@freebsd.org) Received: (from perforce@localhost) by repoman.freebsd.org (8.14.1/8.14.1/Submit) id l9O04udW032122 for perforce@freebsd.org; Wed, 24 Oct 2007 00:04:56 GMT (envelope-from csjp@freebsd.org) Date: Wed, 24 Oct 2007 00:04:56 GMT Message-Id: <200710240004.l9O04udW032122@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: perforce set sender to csjp@freebsd.org using -f From: "Christian S.J. Peron" To: Perforce Change Reviews Cc: Subject: PERFORCE change 127981 for review X-BeenThere: p4-projects@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: p4 projects tree changes List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2007 00:04:57 -0000 http://perforce.freebsd.org/chv.cgi?CH=127981 Change 127981 by csjp@push on 2007/10/24 00:03:56 Use extended process token. The in kernel process audit state is stored in an extended subject token now. Make sure that we are using the extended data. Affected files ... .. //depot/projects/trustedbsd/audit3/sys/security/audit/audit_bsm.c#31 edit Differences ... ==== //depot/projects/trustedbsd/audit3/sys/security/audit/audit_bsm.c#31 (text+ko) ==== @@ -219,11 +219,11 @@ #define PROCESS_PID_TOKENS(argn) do { \ if ((ar->ar_arg_pid > 0) /* Reference a single process */ \ && (ARG_IS_VALID(kar, ARG_PROCESS))) { \ - tok = au_to_process(ar->ar_arg_auid, \ + tok = au_to_process32_ex(ar->ar_arg_auid, \ ar->ar_arg_euid, ar->ar_arg_egid, \ ar->ar_arg_ruid, ar->ar_arg_rgid, \ ar->ar_arg_pid, ar->ar_arg_asid, \ - &ar->ar_arg_termid); \ + &ar->ar_arg_termid_addr); \ kau_write(rec, tok); \ } else if (ARG_IS_VALID(kar, ARG_PID)) { \ tok = au_to_arg32(argn, "process", ar->ar_arg_pid); \