svn commit: r337243 - stable/11/sys/security/audit

[Alan Somers]

Author: asomers
Date: Fri Aug  3 14:06:08 2018
New Revision: 337243
URL: https://svnweb.freebsd.org/changeset/base/337243

Log:
  MFC r336319:
  
  auditon(2): fix A_SETPOLICY with 64-bit values
  
  A_SETPOLICY is supposed to work with either 64 or 32-bit values, but due to a
  typo the 64-bit version has never worked correctly.
  
  Submitted by:	aniketp
  Reviewed by:	asomers, cem
  Sponsored by:	Google, Inc. (GSoC 2018)
  Differential Revision:	https://reviews.freebsd.org/D16222

Modified:
  stable/11/sys/security/audit/audit_syscalls.c
Directory Properties:
  stable/11/   (props changed)

Modified: stable/11/sys/security/audit/audit_syscalls.c
==============================================================================
--- stable/11/sys/security/audit/audit_syscalls.c	Fri Aug  3 14:05:22 2018	(r337242)
+++ stable/11/sys/security/audit/audit_syscalls.c	Fri Aug  3 14:06:08 2018	(r337243)
@@ -241,7 +241,7 @@ sys_auditon(struct thread *td, struct auditon_args *ua
 	case A_OLDSETPOLICY:
 	case A_SETPOLICY:
 		if (uap->length == sizeof(udata.au_policy64)) {
-			if (udata.au_policy & (~AUDIT_CNT|AUDIT_AHLT|
+			if (udata.au_policy & ~(AUDIT_CNT|AUDIT_AHLT|
 			    AUDIT_ARGV|AUDIT_ARGE))
 				return (EINVAL);
 			audit_fail_stop = ((udata.au_policy64 & AUDIT_CNT) ==