revision 1.288
date: 2006/02/04 14:11:33;  author: wsalamon;  state: Exp;  lines: +4 -1
Hook up the audit system to system call entry and exit. System calls will
now be audited.

Obtained from:  TrustedBSD Project
Approved by: rwatson (mentor)
This commit is contained in:
Olivier Houchard 2006-02-04 17:01:19 +00:00
parent 73450b30c8
commit 19d5d0da40
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=155306

View File

@ -119,6 +119,8 @@ __FBSDID("$FreeBSD$");
#include <machine/proc.h>
#include <machine/swi.h>
#include <security/audit/audit.h>
#ifdef KDB
#include <sys/kdb.h>
#endif
@ -927,7 +929,9 @@ syscall(struct thread *td, trapframe_t *frame, u_int32_t insn)
td->td_retval[1] = 0;
STOPEVENT(p, S_SCE, (callp->sy_narg & SYF_ARGMASK));
PTRACESTOP_SC(p, td, S_PT_SCE);
AUDIT_SYSCALL_ENTER(code, td);
error = (*callp->sy_call)(td, args);
AUDIT_SYSCALL_EXIT(error, td);
}
switch (error) {
case 0: