freebsd-dev/sys/security
Christian S.J. Peron cac465aa7f - Add audit_arg_audinfo_addr() for auditing the arguments for setaudit_addr(2)
- In audit_bsm.c, make sure all the arguments: ARG_AUID, ARG_ASID, ARG_AMASK,
  and ARG_TERMID{_ADDR} are valid before auditing their arguments. (This is done
  for both setaudit and setaudit_addr.
- Audit the arguments passed to setaudit_addr(2)
- AF_INET6 does not equate to AU_IPv6. Change this in au_to_in_addr_ex() so the
  audit token is created with the correct type. This fixes the processing of the
  in_addr_ex token in users pace.
- Change the size of the token (as generated by the kernel) from 5*4 bytes to
  4*4 bytes (the correct size of an ip6 address)
- Correct regression from ucred work which resulted in getaudit() not returning
  E2BIG if the subject had an ip6 termid
- Correct slight regression in getaudit(2) which resulted in the size of a pointer
  being passed instead of the size of the structure. (This resulted in invalid
  auditinfo data being returned via getaudit(2))

Reviewed by:	rwatson
Approved by:	re@ (kensmith)
Obtained from:	TrustedBSD Project
MFC after:	1 month
2007-06-27 17:01:15 +00:00
..
audit - Add audit_arg_audinfo_addr() for auditing the arguments for setaudit_addr(2) 2007-06-27 17:01:15 +00:00
mac Add a new MAC framework and policy entry point, 2007-06-26 14:14:01 +00:00
mac_biba Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin, 2007-04-23 13:36:54 +00:00
mac_bsdextended Include priv.h to pick up suser(9) definitions, missed in an earlier 2007-06-13 22:42:43 +00:00
mac_ifoff Apply variable name normalization to MAC policies: adopt global conventions 2007-04-23 13:15:23 +00:00
mac_lomac Commit 14/14 of sched_lock decomposition. 2007-06-05 00:00:57 +00:00
mac_mls Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin, 2007-04-23 13:36:54 +00:00
mac_none Remove many unneeded includes, update copyright. 2007-02-23 11:21:26 +00:00
mac_partition Apply variable name normalization to MAC policies: adopt global conventions 2007-04-23 13:15:23 +00:00
mac_portacl Eliminate now-unused SUSER_ALLOWJAIL arguments to priv_check_cred(); in 2007-06-12 00:12:01 +00:00
mac_seeotheruids Eliminate now-unused SUSER_ALLOWJAIL arguments to priv_check_cred(); in 2007-06-12 00:12:01 +00:00
mac_stub Add a new MAC framework and policy entry point, 2007-06-26 14:14:01 +00:00
mac_test Add a new MAC framework and policy entry point, 2007-06-26 14:14:01 +00:00