cvs commit: src/sys/security/audit audit.c audit.h audit_arg.c audit_bsm.c audit_bsm_klib.c audit_bsm_token.c audit_private.h audit_syscalls.c audit_trigger.c

[Robert Watson]

rwatson     2006-02-01 20:01:18 UTC

  FreeBSD src repository

  Added files:
    sys/security/audit   audit.c audit.h audit_arg.c audit_bsm.c 
                         audit_bsm_klib.c audit_bsm_token.c 
                         audit_private.h audit_syscalls.c 
                         audit_trigger.c 
  Log:
  Import kernel audit framework:
  
  - Management of audit state on processes.
  - Audit system calls to configure process and system audit state.
  - Reliable audit record queue implementation, audit_worker kernel
    thread to asynchronously store records on disk.
  - Audit event argument.
  - Internal audit data structure -> BSM audit trail conversion library.
  - Audit event pre-selection.
  - Audit pseudo-device permitting kernel->user upcalls to notify auditd
    of kernel audit events.
  
  Much work by:   wsalamon
  Obtained from:  TrustedBSD Project, Apple Computer, Inc.
  
  Revision  Changes    Path
  1.1       +1083 -0   src/sys/security/audit/audit.c (new)
  1.1       +238 -0    src/sys/security/audit/audit.h (new)
  1.1       +803 -0    src/sys/security/audit/audit_arg.c (new)
  1.1       +1261 -0   src/sys/security/audit/audit_bsm.c (new)
  1.1       +538 -0    src/sys/security/audit/audit_bsm_klib.c (new)
  1.1       +1181 -0   src/sys/security/audit/audit_bsm_token.c (new)
  1.1       +300 -0    src/sys/security/audit/audit_private.h (new)
  1.1       +652 -0    src/sys/security/audit/audit_syscalls.c (new)
  1.1       +172 -0    src/sys/security/audit/audit_trigger.c (new)