rwatson 2006-09-03 09:21:59 UTC
FreeBSD src repository
Modified files: (Branch: RELENG_6)
sys/kern kern_acct.c kern_exec.c vfs_mount.c
Log:
Merge kern_exec.c:1.293,1.295, kern_acct.c:1.82, vfs_mount.c:1.227 from
HEAD to RELENG_6:
In execve(), audit the path name being executed. In the future, it
would also be good to audit the interpreter pathname, if any.
Audit the argv and env vectors passed in on exec:
Add the argument auditing functions for argv and env.
Add kernel-specific versions of the tokenizer functions for the
arg and env represented as a char array.
Implement the AUDIT_ARGV and AUDIT_ARGE audit policy commands to
enable/disable argv/env auditing.
Call the argument auditing from the exec system calls.
Audit path passed to the acct() system call.
Audit some arguments to nmount(), mount(), umount().
Obtained from: TrustedBSD Project
Revision Changes Path
1.74.2.4 +2 -1 src/sys/kern/kern_acct.c
1.275.2.6 +11 -2 src/sys/kern/kern_exec.c
1.196.2.12 +10 -1 src/sys/kern/vfs_mount.c