svn commit: r203328 - head/sys/security/audit

[Christian S.J. Peron]

Author: csjp
Date: Sun Jan 31 22:31:01 2010
New Revision: 203328
URL: http://svn.freebsd.org/changeset/base/203328

Log:
  Make sure we convert audit records that were produced as the result of the
  closefrom(2) syscall.

Modified:
  head/sys/security/audit/audit_bsm.c

Modified: head/sys/security/audit/audit_bsm.c
==============================================================================
--- head/sys/security/audit/audit_bsm.c	Sun Jan 31 22:21:08 2010	(r203327)
+++ head/sys/security/audit/audit_bsm.c	Sun Jan 31 22:31:01 2010	(r203328)
@@ -842,6 +842,13 @@ kaudit_to_bsm(struct kaudit_record *kar,
 		UPATH1_VNODE1_TOKENS;
 		break;
 
+	case AUE_CLOSEFROM:
+		if (ARG_IS_VALID(kar, ARG_FD)) {
+			tok = au_to_arg32(1, "fd", ar->ar_arg_fd);
+			kau_write(rec, tok);
+		}
+		break;
+
 	case AUE_CORE:
 		if (ARG_IS_VALID(kar, ARG_SIGNUM)) {
 			tok = au_to_arg32(1, "signal", ar->ar_arg_signum);