From owner-cvs-src-old@FreeBSD.ORG Tue Jul 28 21:40:15 2009 Return-Path: Delivered-To: cvs-src-old@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6842510656CB for ; Tue, 28 Jul 2009 21:40:15 +0000 (UTC) (envelope-from rwatson@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id 538278FC1C for ; Tue, 28 Jul 2009 21:40:15 +0000 (UTC) (envelope-from rwatson@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id n6SLeF0e044532 for ; Tue, 28 Jul 2009 21:40:15 GMT (envelope-from rwatson@repoman.freebsd.org) Received: (from svn2cvs@localhost) by repoman.freebsd.org (8.14.3/8.14.3/Submit) id n6SLeF1S044531 for cvs-src-old@freebsd.org; Tue, 28 Jul 2009 21:40:15 GMT (envelope-from rwatson@repoman.freebsd.org) Message-Id: <200907282140.n6SLeF1S044531@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to rwatson@repoman.freebsd.org using -f From: Robert Watson Date: Tue, 28 Jul 2009 21:39:58 +0000 (UTC) To: cvs-src-old@freebsd.org X-FreeBSD-CVS-Branch: HEAD Subject: cvs commit: src/sys/kern vfs_lookup.c src/sys/security/audit audit.c audit.h audit_arg.c audit_bsm.c audit_bsm_klib.c audit_private.h X-BeenThere: cvs-src-old@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: **OBSOLETE** CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jul 2009 21:40:16 -0000 rwatson 2009-07-28 21:39:58 UTC FreeBSD src repository Modified files: sys/kern vfs_lookup.c sys/security/audit audit.c audit.h audit_arg.c audit_bsm.c audit_bsm_klib.c audit_private.h Log: SVN rev 195925 on 2009-07-28 21:39:58Z by rwatson Audit file descriptors passed to fooat(2) system calls, which are used instead of the root/current working directory as the starting point for lookups. Up to two such descriptors can be audited. Add audit record BSM encoding for fooat(2). Note: due to an error in the OpenBSM 1.1p1 configuration file, a further change is required to that file in order to fix openat(2) auditing. Approved by: re (kib) Reviewed by: rdivacky (fooat(2) portions) Obtained from: TrustedBSD Project MFC after: 1 month Revision Changes Path 1.130 +6 -1 src/sys/kern/vfs_lookup.c 1.53 +10 -5 src/sys/security/audit/audit.c 1.27 +16 -0 src/sys/security/audit/audit.h 1.30 +26 -0 src/sys/security/audit/audit_arg.c 1.50 +75 -0 src/sys/security/audit/audit_bsm.c 1.22 +55 -79 src/sys/security/audit/audit_bsm_klib.c 1.29 +3 -0 src/sys/security/audit/audit_private.h