From efc5b661a18dbeb6d04e9916452fb1bd3a748c45 Mon Sep 17 00:00:00 2001 From: rwatson Date: Fri, 31 Oct 2008 15:11:01 +0000 Subject: Since there is no longer the opportunity for record truncation, just return 0 if the truncation counter is queried on an audit pipe. MFC after: 2 months Sponsored by: Apple, Inc. --- sys/security/audit/audit_pipe.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) (limited to 'sys/security') diff --git a/sys/security/audit/audit_pipe.c b/sys/security/audit/audit_pipe.c index 12382fa..1989a1d 100644 --- a/sys/security/audit/audit_pipe.c +++ b/sys/security/audit/audit_pipe.c @@ -144,7 +144,6 @@ struct audit_pipe { u_int64_t ap_inserts; /* Records added. */ u_int64_t ap_reads; /* Records read. */ u_int64_t ap_drops; /* Records dropped. */ - u_int64_t ap_truncates; /* Records too long. */ /* * Fields relating to pipe interest: global masks for unmatched @@ -920,7 +919,7 @@ audit_pipe_ioctl(struct cdev *dev, u_long cmd, caddr_t data, int flag, break; case AUDITPIPE_GET_TRUNCATES: - *(u_int *)data = ap->ap_truncates; + *(u_int *)data = 0; error = 0; break; -- cgit v1.1