PERFORCE change 168937 for review

[Robert Watson]

http://perforce.freebsd.org/chv.cgi?CH=168937

Change 168937 by rwatson at rwatson_cinnamon on 2009/09/27 19:04:52

	Add audit events for FreeBSD process descriptor system calls.

Affected files ...

.. //depot/projects/trustedbsd/openbsm/NEWS#45 edit
.. //depot/projects/trustedbsd/openbsm/etc/audit_event#42 edit
.. //depot/projects/trustedbsd/openbsm/sys/bsm/audit_kevents.h#9 edit

Differences ...

==== //depot/projects/trustedbsd/openbsm/NEWS#45 (text+ko) ====

@@ -2,6 +2,8 @@
 
 OpenBSM 1.2 alpha 1
 
+- Add audit events for FreeBSD process descriptor system calls.
+
 OpenBSM 1.1p2
 
 - Fix audit_event definitions of AUE_OPENAT_RWT and AUE_OPENAT_RWTC.
@@ -466,4 +468,4 @@
   to support reloading of kernel event table.
 - Allow comments in /etc/security configuration files.
 
-$P4: //depot/projects/trustedbsd/openbsm/NEWS#44 $
+$P4: //depot/projects/trustedbsd/openbsm/NEWS#45 $

==== //depot/projects/trustedbsd/openbsm/etc/audit_event#42 (text+ko) ====

@@ -1,5 +1,5 @@
 #
-# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_event#41 $
+# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_event#42 $
 #
 # The mapping between event identifiers and values is also hard-coded in
 # audit_kevents.h and audit_uevents.h, so changes must occur in both places,
@@ -557,6 +557,10 @@
 43194:AUE_FSCTL:fsctl():fm
 43195:AUE_FFSCTL:ffsctl():fm
 43196:AUE_LPATHCONF:lpathconf(2):fa
+43197:AUE_PDFORK:pdfork(2):pc
+43198:AUE_PDKILL:pdkill(2):pc
+43199:AUE_PDGETPID:pdgetpid(2):pc
+43200:AUE_PDWAIT:pdwait(2):pc
 #
 # Solaris userspace events.
 #

==== //depot/projects/trustedbsd/openbsm/sys/bsm/audit_kevents.h#9 (text+ko) ====

@@ -26,7 +26,7 @@
  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  *
- * $P4: //depot/projects/trustedbsd/openbsm/sys/bsm/audit_kevents.h#8 $
+ * $P4: //depot/projects/trustedbsd/openbsm/sys/bsm/audit_kevents.h#9 $
  */
 
 #ifndef _BSM_AUDIT_KEVENTS_H_
@@ -597,6 +597,10 @@
 #define	AUE_FSCTL		43194	/* Darwin. */
 #define	AUE_FFSCTL		43195	/* Darwin. */
 #define	AUE_LPATHCONF		43196	/* FreeBSD. */
+#define	AUE_PDFORK		43197	/* FreeBSD. */
+#define	AUE_PDKILL		43198	/* FreeBSD. */
+#define	AUE_PDGETPID		43199	/* FreeBSD. */
+#define	AUE_PDWAIT		43200	/* FreeBSD. */
 
 /*
  * Darwin BSM uses a number of AUE_O_* definitions, which are aliased to the