PERFORCE change 45245 for review

Robert Watson rwatson at FreeBSD.org
Tue Jan 13 04:48:56 GMT 2004


http://perforce.freebsd.org/chv.cgi?CH=45245

Change 45245 by rwatson at rwatson_paprika on 2004/01/12 20:48:51

	Move in-kernel BSM APIs to audit private include file, to avoid
	exposing token_t to the remainder of the kernel.

Affected files ...

.. //depot/projects/trustedbsd/audit2/sys/security/audit/audit_private.h#3 edit
.. //depot/projects/trustedbsd/audit2/sys/security/audit/kern_audit.h#9 edit

Differences ...

==== //depot/projects/trustedbsd/audit2/sys/security/audit/audit_private.h#3 (text+ko) ====

@@ -123,4 +123,21 @@
 	TAILQ_ENTRY(kaudit_record)	k_q;
 };
 
+/*
+ * Kernel versions of the BSM audit record functions.
+ */
+struct au_record 	*kau_open(void);
+int			kau_write(struct au_record *rec, token_t *m);
+int			kau_close(struct au_record *rec, 
+				 struct timespec *endtime, short event);
+void			kau_free(struct au_record *rec);
+void			kau_init(void);
+token_t			*kau_to_file(char *file, struct timeval *tv);
+token_t			*kau_to_header(struct timespec *ctime, int rec_size, 
+					au_event_t e_type, au_emod_t e_mod);
+token_t			*kau_to_header32(struct timespec *ctime, int rec_size, 
+					au_event_t e_type, au_emod_t e_mod);
+token_t			*kau_to_header64(struct timespec *ctime, int rec_size,
+					 au_event_t e_type, au_emod_t e_mod);
+
 #endif /* !_SYS_AUDIT_PRIVATE_H */

==== //depot/projects/trustedbsd/audit2/sys/security/audit/kern_audit.h#9 (text+ko) ====

@@ -114,22 +114,6 @@
 int			bsm_rec_verify(caddr_t rec);
 
 /*
- * Kernel versions of the BSM audit record functions.
- */
-struct au_record 	*kau_open(void);
-int			kau_write(struct au_record *rec, token_t *m);
-int			kau_close(struct au_record *rec, 
-				 struct timespec *endtime, short event);
-void			kau_free(struct au_record *rec);
-void			kau_init(void);
-token_t			*kau_to_file(char *file, struct timeval *tv);
-token_t			*kau_to_header(struct timespec *ctime, int rec_size, 
-					au_event_t e_type, au_emod_t e_mod);
-token_t			*kau_to_header32(struct timespec *ctime, int rec_size, 
-					au_event_t e_type, au_emod_t e_mod);
-token_t			*kau_to_header64(struct timespec *ctime, int rec_size,
-					 au_event_t e_type, au_emod_t e_mod);
-/*
  * The remaining kernel functions are conditionally compiled in as they
  * are wrapped by a macro, and the macro should be the only place in 
  * the source tree where these functions are referenced.
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message



More information about the trustedbsd-cvs mailing list