cvs commit: src/sys/security/audit audit_bsm.c

[Robert Watson]

rwatson     2006-09-22 13:50:58 UTC

  FreeBSD src repository

  Modified files:        (Branch: RELENG_6)
    sys/security/audit   audit_bsm.c 
  Log:
  Merge audit_bsm.c:1.14 from HEAD to RELENG_6:
  
    Rather than allocating all buffer memory for the completed BSM record
    when allocating the record in the first place, allocate the final buffer
    when closing the BSM record.  At that point, more size information is
    available, so a sufficiently large buffer can be allocated.
  
    This allows the kernel to generate audit records in excess of
    MAXAUDITDATA bytes, but is consistent with Solaris's behavior.  This only
    comes up when auditing command line arguments, in which case we presume
    the administrator really does want the data as they have specified the
    policy flag to gather them.
  
    Obtained from:  TrustedBSD Project
  
  Approved by:    re (mux)
  
  Revision  Changes    Path
  1.10.2.5  +17 -19    src/sys/security/audit/audit_bsm.c