summaryrefslogtreecommitdiffstats
path: root/sys/security/audit
diff options
context:
space:
mode:
authorrwatson <rwatson@FreeBSD.org>2009-02-08 14:24:35 +0000
committerrwatson <rwatson@FreeBSD.org>2009-02-08 14:24:35 +0000
commit0f48dc75aa96065ce62a300ff7822b8bca65141a (patch)
tree8e0a12a18a820477a5647234a37740ab5e72ea1e /sys/security/audit
parent4349e4002b82f599f3bf17113864d00c70d3ed68 (diff)
downloadFreeBSD-src-0f48dc75aa96065ce62a300ff7822b8bca65141a.zip
FreeBSD-src-0f48dc75aa96065ce62a300ff7822b8bca65141a.tar.gz
Audit AUE_MAC_EXECVE; currently just the standard AUE_EXECVE arguments
and not the label. Obtained from: TrustedBSD Project Sponsored by: Apple, Inc. MFC after: 1 week
Diffstat (limited to 'sys/security/audit')
-rw-r--r--sys/security/audit/audit_bsm.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/sys/security/audit/audit_bsm.c b/sys/security/audit/audit_bsm.c
index c4acf16..3326961 100644
--- a/sys/security/audit/audit_bsm.c
+++ b/sys/security/audit/audit_bsm.c
@@ -791,6 +791,7 @@ kaudit_to_bsm(struct kaudit_record *kar, struct au_record **pau)
/* FALLTHROUGH */
case AUE_EXECVE:
+ case AUE_MAC_EXECVE:
if (ARG_IS_VALID(kar, ARG_ARGV)) {
tok = au_to_exec_args(ar->ar_arg_argv,
ar->ar_arg_argc);
OpenPOWER on IntegriCloud