PERFORCE change 147229 for review

[Vincenzo Iozzo]

http://perforce.freebsd.org/chv.cgi?CH=147229

Change 147229 by snagg at snagg_macosx on 2008/08/12 12:35:23

	Added tests for execve(2).

Affected files ...

.. //depot/projects/soc2008/snagg-audit/tools/regression/audit/audit_pipe/audit_pipe_regression_test_utils.c#15 edit
.. //depot/projects/soc2008/snagg-audit/tools/regression/audit/audit_pipe/audit_pipe_regression_test_utils.h#12 edit
.. //depot/projects/soc2008/snagg-audit/tools/regression/audit/audit_pipe/specific-event/audit_pipe_event_execve.c#1 add
.. //depot/projects/soc2008/snagg-audit/tools/regression/audit/audit_pipe/specific-event/audit_pipe_event_suidexecve.c#1 add

Differences ...

==== //depot/projects/soc2008/snagg-audit/tools/regression/audit/audit_pipe/audit_pipe_regression_test_utils.c#15 (text+ko) ====

@@ -256,8 +256,17 @@
 	
 	return (0);
 }
+
+int check_exec_arg(char *str_exec, char *arg)
+{
 	
-/*
+	if(!strncmp(str_exec, arg, 256))
+		return (1);
+	
+	return (0);
+}	
+
+/*		
  * Check the return value of a bsm-token
  */
 int check_ret(au_ret32_t ret, int r, char *val)
@@ -404,7 +413,7 @@
 	if(entry == NULL)
 		err(-1, "MALLOC");
 
-	value = 3;
+	value = AUDITPIPE_PRESELECT_MODE_PROC;
 	if (ioctl(fd, AUDITPIPE_SET_PRESELECT_MODE, &value) < 0)
 		err(-1, "AUDITPIPE_SET_PRESELECT_MODE");
 		

==== //depot/projects/soc2008/snagg-audit/tools/regression/audit/audit_pipe/audit_pipe_regression_test_utils.h#12 (text+ko) ====

@@ -136,3 +136,4 @@
 int check_priv_child(au_proc32ex_t pr, struct priv p);
 int check_attr_path(au_attr32_t attr, char *path);
 int check_sock(au_socketinet32_t s , struct sockaddr_in a);
+int check_exec_arg(char *str_exec, char *arg);