Add a new MAC framework and policy entry point,

mpo_check_proc_setaudit_addr to be used when controlling use of
setaudit_addr(), rather than mpo_check_proc_setaudit(), which takes a
different argument type.

Reviewed by:	csjp
Approved by:	re (kensmith)

1 files changed, 10 insertions, 0 deletions

diff --git a/sys/security/mac/mac_audit.c b/sys/security/mac/mac_audit.c
index c3aad11..69731c7 100644
--- a/sys/security/mac/mac_audit.c
+++ b/sys/security/mac/mac_audit.c
@@ -56,6 +56,16 @@ mac_check_proc_setaudit(struct ucred *cred, struct auditinfo *ai)
 }
 
 int
+mac_check_proc_setaudit_addr(struct ucred *cred, struct auditinfo_addr *aia)
+{
+	int error;
+
+	MAC_CHECK(check_proc_setaudit_addr, cred, aia);
+
+	return (error);
+}
+
+int
 mac_check_proc_setauid(struct ucred *cred, uid_t auid)
 {
 	int error;