Audit AUE_MAC_EXECVE; currently just the standard AUE_EXECVE arguments

and not the label.

Obtained from:	TrustedBSD Project
Sponsored by:	Apple, Inc.
MFC after:	1 week
This commit is contained in:
Robert Watson 2009-02-08 14:24:35 +00:00
parent 4ba1f444c5
commit 8b14aeee4b
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=188312

View File

@ -791,6 +791,7 @@ kaudit_to_bsm(struct kaudit_record *kar, struct au_record **pau)
/* FALLTHROUGH */
case AUE_EXECVE:
case AUE_MAC_EXECVE:
if (ARG_IS_VALID(kar, ARG_ARGV)) {
tok = au_to_exec_args(ar->ar_arg_argv,
ar->ar_arg_argc);