diff options
| author | csjp <csjp@FreeBSD.org> | 2010-01-31 22:31:01 +0000 |
|---|---|---|
| committer | csjp <csjp@FreeBSD.org> | 2010-01-31 22:31:01 +0000 |
| commit | c08d122e44870d1867ff776fccbb8be2a96120e7 (patch) | |
| tree | e5ce7622af78ea1b1e9834f1f968de6dc8b681a7 /sys/security/audit | |
| parent | c801976d1315cbf2f0b443e7850c19bcda1cf5ce (diff) | |
| download | FreeBSD-src-c08d122e44870d1867ff776fccbb8be2a96120e7.zip FreeBSD-src-c08d122e44870d1867ff776fccbb8be2a96120e7.tar.gz | |
Make sure we convert audit records that were produced as the result of the
closefrom(2) syscall.
Diffstat (limited to 'sys/security/audit')
| -rw-r--r-- | sys/security/audit/audit_bsm.c | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/sys/security/audit/audit_bsm.c b/sys/security/audit/audit_bsm.c index b1a9931..faa4583 100644 --- a/sys/security/audit/audit_bsm.c +++ b/sys/security/audit/audit_bsm.c @@ -842,6 +842,13 @@ kaudit_to_bsm(struct kaudit_record *kar, struct au_record **pau) UPATH1_VNODE1_TOKENS; break; + case AUE_CLOSEFROM: + if (ARG_IS_VALID(kar, ARG_FD)) { + tok = au_to_arg32(1, "fd", ar->ar_arg_fd); + kau_write(rec, tok); + } + break; + case AUE_CORE: if (ARG_IS_VALID(kar, ARG_SIGNUM)) { tok = au_to_arg32(1, "signal", ar->ar_arg_signum); |
