From owner-p4-projects  Mon Sep 30  5:49:22 2002
Delivered-To: p4-projects@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 32767)
	id 4D67037B404; Mon, 30 Sep 2002 05:49:20 -0700 (PDT)
Delivered-To: perforce@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id D1F7637B401
	for <perforce@freebsd.org>; Mon, 30 Sep 2002 05:49:19 -0700 (PDT)
Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 8FA0A43E4A
	for <perforce@freebsd.org>; Mon, 30 Sep 2002 05:49:19 -0700 (PDT)
	(envelope-from cvance@tislabs.com)
Received: from freefall.freebsd.org (perforce@localhost [127.0.0.1])
	by freefall.freebsd.org (8.12.6/8.12.6) with ESMTP id g8UCnJCo087452
	for <perforce@freebsd.org>; Mon, 30 Sep 2002 05:49:19 -0700 (PDT)
	(envelope-from cvance@tislabs.com)
Received: (from perforce@localhost)
	by freefall.freebsd.org (8.12.6/8.12.6/Submit) id g8UCnJ2b087449
	for perforce@freebsd.org; Mon, 30 Sep 2002 05:49:19 -0700 (PDT)
Date: Mon, 30 Sep 2002 05:49:19 -0700 (PDT)
Message-Id: <200209301249.g8UCnJ2b087449@freefall.freebsd.org>
X-Authentication-Warning: freefall.freebsd.org: perforce set sender to cvance@tislabs.com using -f
From: Chris Vance <cvance@FreeBSD.org>
Subject: PERFORCE change 18375 for review
To: Perforce Change Reviews <perforce@freebsd.org>
Sender: owner-p4-projects@FreeBSD.ORG
Precedence: bulk
List-ID: <p4-projects.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20p4-projects>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20p4-projects>
X-Loop: FreeBSD.ORG

http://people.freebsd.org/~peter/p4db/chv.cgi?CH=18375

Change 18375 by cvance@cvance_laptop on 2002/09/30 05:48:53

	Fix auditing code for access vector decision checking routines. 

Affected files ...

.. //depot/projects/trustedbsd/mac/sys/security/sebsd/avc/avc.c#5 edit
.. //depot/projects/trustedbsd/mac/sys/security/sebsd/avc/avc.h#8 edit

Differences ...

==== //depot/projects/trustedbsd/mac/sys/security/sebsd/avc/avc.c#5 (text+ko) ====

@@ -482,6 +482,29 @@
 	if (curproc && curproc->p_pid) {
 		printf(" pid=%d", curproc->p_pid);
 	}
+	if (a) {
+		switch (a->type) {
+		case AVC_AUDIT_DATA_IPC:
+			printf(" IPCID=%d", a->u.ipc_id);
+			break;
+		case AVC_AUDIT_DATA_CAP:
+			printf(" capability=%d", a->u.cap);
+			break;
+		case AVC_AUDIT_DATA_FS:
+			if (a->u.fs.vp) {
+				struct vnode *vp = a->u.fs.vp;
+				struct vattr va;
+				VOP_GETATTR(vp, &va, curthread->td_ucred, 
+					    curthread);
+				printf(" inode=%d, fsid=%d, ftype=%d",
+				       va.va_fileid, va.va_fsid, vp->v_type);
+				       
+			}
+			break;
+		case AVC_AUDIT_DATA_NET:
+			break;
+		}
+	}
 
 	printf(" ");
 	avc_dump_query(ssid, tsid, tclass);

==== //depot/projects/trustedbsd/mac/sys/security/sebsd/avc/avc.h#8 (text+ko) ====

@@ -81,7 +81,7 @@
 	char    type;
 	union 	{
 		struct {
-			char *name;
+			struct vnode *vp;
 		} fs;
 		struct {
 			char *netif;

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe p4-projects" in the body of the message