PERFORCE change 127981 for review

Christian S.J. Peron csjp at FreeBSD.org
Tue Oct 23 17:04:57 PDT 2007


http://perforce.freebsd.org/chv.cgi?CH=127981

Change 127981 by csjp at push on 2007/10/24 00:03:56

	Use extended process token.  The in kernel process audit
	state is stored in an extended subject token now.  Make sure
	that we are using the extended data.

Affected files ...

.. //depot/projects/trustedbsd/audit3/sys/security/audit/audit_bsm.c#31 edit

Differences ...

==== //depot/projects/trustedbsd/audit3/sys/security/audit/audit_bsm.c#31 (text+ko) ====

@@ -219,11 +219,11 @@
 #define PROCESS_PID_TOKENS(argn) do {					\
 	if ((ar->ar_arg_pid > 0) /* Reference a single process */	\
 	    && (ARG_IS_VALID(kar, ARG_PROCESS))) {			\
-		tok = au_to_process(ar->ar_arg_auid,			\
+		tok = au_to_process32_ex(ar->ar_arg_auid,		\
 		    ar->ar_arg_euid, ar->ar_arg_egid,			\
 		    ar->ar_arg_ruid, ar->ar_arg_rgid,			\
 		    ar->ar_arg_pid, ar->ar_arg_asid,			\
-		    &ar->ar_arg_termid);				\
+		    &ar->ar_arg_termid_addr);				\
 		kau_write(rec, tok);					\
 	} else if (ARG_IS_VALID(kar, ARG_PID)) {			\
 		tok = au_to_arg32(argn, "process", ar->ar_arg_pid);	\


More information about the p4-projects mailing list