summaryrefslogtreecommitdiffstats
path: root/sys/security/audit
diff options
context:
space:
mode:
authorcsjp <csjp@FreeBSD.org>2008-08-11 20:14:56 +0000
committercsjp <csjp@FreeBSD.org>2008-08-11 20:14:56 +0000
commit4c2ecbd8bd352951ebc3b34777ff61daf6b3f219 (patch)
tree96289b2cf29152067315d3235555266dfb61f87a /sys/security/audit
parent7e1207323cbd8d55de7238e54cc4ff8990432529 (diff)
downloadFreeBSD-src-4c2ecbd8bd352951ebc3b34777ff61daf6b3f219.zip
FreeBSD-src-4c2ecbd8bd352951ebc3b34777ff61daf6b3f219.tar.gz
Make sure we check the preselection masks present for all audit pipes.
It is possible that the audit pipe(s) have different preselection configs then the global preselection mask. Spotted by: Vincenzo Iozzo MFC after: 2 weeks
Diffstat (limited to 'sys/security/audit')
-rw-r--r--sys/security/audit/audit.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/sys/security/audit/audit.c b/sys/security/audit/audit.c
index 795b2a5..737c693 100644
--- a/sys/security/audit/audit.c
+++ b/sys/security/audit/audit.c
@@ -609,7 +609,8 @@ audit_proc_coredump(struct thread *td, char *path, int errcode)
else
sorf = AU_PRS_SUCCESS;
class = au_event_class(AUE_CORE);
- if (au_preselect(AUE_CORE, class, aumask, sorf) == 0)
+ if (au_preselect(AUE_CORE, class, aumask, sorf) == 0 &&
+ audit_pipe_preselect(auid, AUE_CORE, class, sorf, 0) == 0)
return;
/*
* If we are interested in seeing this audit record, allocate it.
OpenPOWER on IntegriCloud