d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Make sure we check the preselection masks present for all audit pipes.

Browse Source 
It is possible that the audit pipe(s) have different preselection configs
then the global preselection mask.

Spotted by:	Vincenzo Iozzo
MFC after:	2 weeks
This commit is contained in:
Christian S.J. Peron 2008-08-11 20:14:56 +00:00
parent 24f1b6531c
commit 40d288ba0c
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=181604
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
sys/security/audit/audit.c
View File

@ -609,7 +609,8 @@ audit_proc_coredump(struct thread *td, char *path, int errcode)
else
sorf = AU_PRS_SUCCESS;
class = au_event_class(AUE_CORE);
if (au_preselect(AUE_CORE, class, aumask, sorf) == 0)
if (au_preselect(AUE_CORE, class, aumask, sorf) == 0 &&
audit_pipe_preselect(auid, AUE_CORE, class, sorf, 0) == 0)
return;
/*
* If we are interested in seeing this audit record, allocate it.