PERFORCE change 127981 for review

[Christian S.J. Peron]

http://perforce.freebsd.org/chv.cgi?CH=127981

Change 127981 by csjp at push on 2007/10/24 00:03:56

	Use extended process token.  The in kernel process audit
	state is stored in an extended subject token now.  Make sure
	that we are using the extended data.

Affected files ...

.. //depot/projects/trustedbsd/audit3/sys/security/audit/audit_bsm.c#31 edit

Differences ...

==== //depot/projects/trustedbsd/audit3/sys/security/audit/audit_bsm.c#31 (text+ko) ====

@@ -219,11 +219,11 @@
 #define PROCESS_PID_TOKENS(argn) do {					\
 	if ((ar->ar_arg_pid > 0) /* Reference a single process */	\
 	    && (ARG_IS_VALID(kar, ARG_PROCESS))) {			\
-		tok = au_to_process(ar->ar_arg_auid,			\
+		tok = au_to_process32_ex(ar->ar_arg_auid,		\
 		    ar->ar_arg_euid, ar->ar_arg_egid,			\
 		    ar->ar_arg_ruid, ar->ar_arg_rgid,			\
 		    ar->ar_arg_pid, ar->ar_arg_asid,			\
-		    &ar->ar_arg_termid);				\
+		    &ar->ar_arg_termid_addr);				\
 		kau_write(rec, tok);					\
 	} else if (ARG_IS_VALID(kar, ARG_PID)) {			\
 		tok = au_to_arg32(argn, "process", ar->ar_arg_pid);	\