Date: Sun, 27 Sep 2009 19:05:49 GMT From: Robert Watson <rwatson@FreeBSD.org> To: Perforce Change Reviews <perforce@freebsd.org> Subject: PERFORCE change 168937 for review Message-ID: <200909271905.n8RJ5ndw040743@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=168937 Change 168937 by rwatson@rwatson_cinnamon on 2009/09/27 19:04:52 Add audit events for FreeBSD process descriptor system calls. Affected files ... .. //depot/projects/trustedbsd/openbsm/NEWS#45 edit .. //depot/projects/trustedbsd/openbsm/etc/audit_event#42 edit .. //depot/projects/trustedbsd/openbsm/sys/bsm/audit_kevents.h#9 edit Differences ... ==== //depot/projects/trustedbsd/openbsm/NEWS#45 (text+ko) ==== @@ -2,6 +2,8 @@ OpenBSM 1.2 alpha 1 +- Add audit events for FreeBSD process descriptor system calls. + OpenBSM 1.1p2 - Fix audit_event definitions of AUE_OPENAT_RWT and AUE_OPENAT_RWTC. @@ -466,4 +468,4 @@ to support reloading of kernel event table. - Allow comments in /etc/security configuration files. -$P4: //depot/projects/trustedbsd/openbsm/NEWS#44 $ +$P4: //depot/projects/trustedbsd/openbsm/NEWS#45 $ ==== //depot/projects/trustedbsd/openbsm/etc/audit_event#42 (text+ko) ==== @@ -1,5 +1,5 @@ # -# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_event#41 $ +# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_event#42 $ # # The mapping between event identifiers and values is also hard-coded in # audit_kevents.h and audit_uevents.h, so changes must occur in both places, @@ -557,6 +557,10 @@ 43194:AUE_FSCTL:fsctl():fm 43195:AUE_FFSCTL:ffsctl():fm 43196:AUE_LPATHCONF:lpathconf(2):fa +43197:AUE_PDFORK:pdfork(2):pc +43198:AUE_PDKILL:pdkill(2):pc +43199:AUE_PDGETPID:pdgetpid(2):pc +43200:AUE_PDWAIT:pdwait(2):pc # # Solaris userspace events. # ==== //depot/projects/trustedbsd/openbsm/sys/bsm/audit_kevents.h#9 (text+ko) ==== @@ -26,7 +26,7 @@ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. * - * $P4: //depot/projects/trustedbsd/openbsm/sys/bsm/audit_kevents.h#8 $ + * $P4: //depot/projects/trustedbsd/openbsm/sys/bsm/audit_kevents.h#9 $ */ #ifndef _BSM_AUDIT_KEVENTS_H_ @@ -597,6 +597,10 @@ #define AUE_FSCTL 43194 /* Darwin. */ #define AUE_FFSCTL 43195 /* Darwin. */ #define AUE_LPATHCONF 43196 /* FreeBSD. */ +#define AUE_PDFORK 43197 /* FreeBSD. */ +#define AUE_PDKILL 43198 /* FreeBSD. */ +#define AUE_PDGETPID 43199 /* FreeBSD. */ +#define AUE_PDWAIT 43200 /* FreeBSD. */ /* * Darwin BSM uses a number of AUE_O_* definitions, which are aliased to the
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200909271905.n8RJ5ndw040743>