From 4349e4002b82f599f3bf17113864d00c70d3ed68 Mon Sep 17 00:00:00 2001 From: rwatson Date: Sun, 8 Feb 2009 14:04:08 +0000 Subject: Audit the flag argument to the nfssvc(2) system call. Obtained from: TrustedBSD Project Sponsored by: Apple, Inc. --- sys/security/audit/audit_bsm.c | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) (limited to 'sys/security') diff --git a/sys/security/audit/audit_bsm.c b/sys/security/audit/audit_bsm.c index c1e0494..c4acf16 100644 --- a/sys/security/audit/audit_bsm.c +++ b/sys/security/audit/audit_bsm.c @@ -1,5 +1,5 @@ /* - * Copyright (c) 1999-2005 Apple Inc. + * Copyright (c) 1999-2009 Apple Inc. * All rights reserved. * * Redistribution and use in source and binary forms, with or without @@ -639,7 +639,6 @@ kaudit_to_bsm(struct kaudit_record *kar, struct au_record **pau) case AUE_MODLOAD: case AUE_MODUNLOAD: case AUE_MSGSYS: - case AUE_NFS_SVC: case AUE_NTP_ADJTIME: case AUE_PIPE: case AUE_PROFILE: @@ -1017,6 +1016,13 @@ kaudit_to_bsm(struct kaudit_record *kar, struct au_record **pau) } /* FALLTHROUGH */ + case AUE_NFS_SVC: + if (ARG_IS_VALID(kar, ARG_CMD)) { + tok = au_to_arg32(1, "request", ar->ar_arg_cmd); + kau_write(rec, tok); + } + break; + case AUE_UMOUNT: UPATH1_VNODE1_TOKENS; break; -- cgit v1.1