svn commit: r189063 - head/sys/kern

[Robert Watson]

On Thu, 26 Feb 2009, Robert Watson wrote:

> Log:
>  Add static tracing for privilege checking:
>
>    priv:kernel:priv_check:priv_ok fires for granted privileges
>    priv:kernel:priv_check:priv_errr fires for denied privileges
>
>  The first argument is the requested privilege number.  The naming
>  convention is a little different from the OpenSolaris equivilent
>  because we can't have '-' in probefunc names, and our privilege
>  namespace is different.

A typical tracing command might be:

   dtrace -n 'priv:::priv_ok { trace(execname); trace(arg0);}'

arg0 requires manual interpretation using /usr/include/sys/priv.h.

Robert N M Watson
Computer Laboratory
University of Cambridge