diff --git a/sys/kern/kern_exit.c b/sys/kern/kern_exit.c index ae060da12f8a..450aab602cc3 100644 --- a/sys/kern/kern_exit.c +++ b/sys/kern/kern_exit.c @@ -804,6 +804,7 @@ kern_wait(struct thread *td, pid_t pid, int *status, int options, int error, nfound; AUDIT_ARG_PID(pid); + AUDIT_ARG_VALUE(options); q = td->td_proc; if (pid == 0) { diff --git a/sys/security/audit/audit_bsm.c b/sys/security/audit/audit_bsm.c index 80fbd74dd3c6..ee92e16b103f 100644 --- a/sys/security/audit/audit_bsm.c +++ b/sys/security/audit/audit_bsm.c @@ -1498,6 +1498,10 @@ kaudit_to_bsm(struct kaudit_record *kar, struct au_record **pau) tok = au_to_arg32(0, "pid", ar->ar_arg_pid); kau_write(rec, tok); } + if (ARG_IS_VALID(kar, ARG_VALUE)) { + tok = au_to_arg32(0, "options", ar->ar_arg_value); + kau_write(rec, tok); + } break; case AUE_NULL: