Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 15 Jun 2006 00:17:10 GMT
From:      Wayne Salamon <wsalamon@FreeBSD.org>
To:        Perforce Change Reviews <perforce@freebsd.org>
Subject:   PERFORCE change 99267 for review
Message-ID:  <200606150017.k5F0HA0D060681@repoman.freebsd.org>

next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=99267

Change 99267 by wsalamon@gretsch on 2006/06/15 00:16:51

	Some updates for system calls already audited.

Affected files ...

.. //depot/projects/trustedbsd/audit3/notes/syscall_audit.tsv#5 edit

Differences ...

==== //depot/projects/trustedbsd/audit3/notes/syscall_audit.tsv#5 (text+ko) ====

@@ -50,7 +50,7 @@
 SYS_accept		30	Y	N	s, addr, fd; addrlen?
 SYS_getpeername		31	?	N	if audited: s, name; namelen?
 SYS_getsockname		32	?	N	if audited: s, name; namelen?
-SYS_access		33	Y	N	path, mode
+SYS_access		33	Y	Y	path, attr
 SYS_chflags		34	Y	Y	path, flags, attr
 SYS_fchflags		35	Y	Y	fd, attr, fflags
 SYS_sync		36	Y	N
@@ -74,7 +74,7 @@
 SYS_ioctl		54	Y	N	d, request, argp?
 SYS_reboot		55	Y	N	how
 SYS_revoke		56	Y	N	path
-SYS_symlink		57	Y	N	name1, name2
+SYS_symlink		57	Y	Y	path, attr, link
 SYS_readlink		58	Y	N	path, buf, bufsiz
 SYS_execve		59	Y	N	path, argv, envp?
 SYS_umask		60	Y	N	numask
@@ -137,7 +137,7 @@
 SYS_rename		128	Y	N
 				
 SYS_flock		131	Y	N	fd, operation, addr
-SYS_mkfifo		132	Y	N
+SYS_mkfifo		132	Y	Y	path, attr, mode
 SYS_sendto		133	Y	N
 SYS_shutdown		134	Y	N
 SYS_socketpair		135	Y	N
@@ -148,7 +148,7 @@
 SYS_adjtime		140	Y	N
 
 SYS_setsid		147	Y	N
-SYS_quotactl		148	Y	N
+SYS_quotactl		148	Y	Y	path, attr, cmd, uid
 
 SYS_nfssvc		155	Y	N
 
@@ -171,7 +171,7 @@
 SYS_stat		188	Y	Y	path, attr; sb?
 SYS_fstat		189	Y	Y	fd, attr; sb?
 SYS_lstat		190	Y	Y	path, attr; sb?
-SYS_pathconf		191	Y	N
+SYS_pathconf		191	Y	Y
 SYS_fpathconf		192	Y	N
 SYS_getrlimit		194	N	N
 SYS_setrlimit		195	Y	N
@@ -179,8 +179,8 @@
 SYS_mmap		197	Y	N	addr, len, fd; prot?, flags? (see BSM)
 SYS___syscall		198	?	N	the resulting syscall would still be audited
 SYS_lseek		199	N	N	Because read() is not audited, lseek isn't
-SYS_truncate		200	Y	N
-SYS_ftruncate		201	Y	N
+SYS_truncate		200	Y	Y	path, attr
+SYS_ftruncate		201	Y	Y	path, attr
 SYS___sysctl		202	Y	N
 SYS_mlock		203	Y	N
 SYS_munlock		204	Y	N
@@ -286,7 +286,7 @@
 SYS_extattr_delete_fd	373	Y	N
 SYS___setugid		374	?	N
 SYS_nfsclnt		375	?	N
-SYS_eaccess		376	?	N
+SYS_eaccess		376	Y	Y	path, attr
 SYS_nmount		378	Y	Y	iovec strings audited
 SYS_kse_exit		379	?	N
 SYS_kse_wakeup		380	?	N



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200606150017.k5F0HA0D060681>