If an AUE_SYSCTL_NONADMIN audit event is selected, generate a record

with equivilent content to AUE_SYSCTL.

Obtained from:	Apple Inc.
MFC after:	3 days
This commit is contained in:
Robert Watson 2008-07-22 17:54:32 +00:00
parent 30d0721b59
commit 93536b495d
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=180716

View File

@ -1382,6 +1382,7 @@ kaudit_to_bsm(struct kaudit_record *kar, struct au_record **pau)
break;
case AUE_SYSCTL:
case AUE_SYSCTL_NONADMIN:
if (ARG_IS_VALID(kar, ARG_CTLNAME | ARG_LEN)) {
for (ctr = 0; ctr < ar->ar_arg_len; ctr++) {
tok = au_to_arg32(1, "name",