PERFORCE change 18375 for review

[Chris Vance]

http://people.freebsd.org/~peter/p4db/chv.cgi?CH=18375

Change 18375 by cvance at cvance_laptop on 2002/09/30 05:48:53

	Fix auditing code for access vector decision checking routines. 

Affected files ...

.. //depot/projects/trustedbsd/mac/sys/security/sebsd/avc/avc.c#5 edit
.. //depot/projects/trustedbsd/mac/sys/security/sebsd/avc/avc.h#8 edit

Differences ...

==== //depot/projects/trustedbsd/mac/sys/security/sebsd/avc/avc.c#5 (text+ko) ====

@@ -482,6 +482,29 @@
 	if (curproc && curproc->p_pid) {
 		printf(" pid=%d", curproc->p_pid);
 	}
+	if (a) {
+		switch (a->type) {
+		case AVC_AUDIT_DATA_IPC:
+			printf(" IPCID=%d", a->u.ipc_id);
+			break;
+		case AVC_AUDIT_DATA_CAP:
+			printf(" capability=%d", a->u.cap);
+			break;
+		case AVC_AUDIT_DATA_FS:
+			if (a->u.fs.vp) {
+				struct vnode *vp = a->u.fs.vp;
+				struct vattr va;
+				VOP_GETATTR(vp, &va, curthread->td_ucred, 
+					    curthread);
+				printf(" inode=%d, fsid=%d, ftype=%d",
+				       va.va_fileid, va.va_fsid, vp->v_type);
+				       
+			}
+			break;
+		case AVC_AUDIT_DATA_NET:
+			break;
+		}
+	}
 
 	printf(" ");
 	avc_dump_query(ssid, tsid, tclass);

==== //depot/projects/trustedbsd/mac/sys/security/sebsd/avc/avc.h#8 (text+ko) ====

@@ -81,7 +81,7 @@
 	char    type;
 	union 	{
 		struct {
-			char *name;
+			struct vnode *vp;
 		} fs;
 		struct {
 			char *netif;
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message