d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
ffbcef5a42
freebsd-dev/sys
History
Christian S.J. Peron ffbcef5a42 Add support for extended header BSM tokens. Currently we use the 
regular header tokens.  The extended header tokens contain an IP
or IPv6 address which makes it possible to identify which host an
audit record came from when audit records are centralized.

If the host information has not been specified, the system will
default to the old style headers.  Otherwise, audit records that
are created as a result of system calls will contain host information.

This implemented has been designed to be consistent with the Solaris
implementation.  Host information is set/retrieved using the A_GETKAUDIT
and A_SETKAUDIT auditon(2) commands.  These commands require that a
pointer to a auditinfo_addr_t object is passed.  Currently only IP and
IPv6 address families are supported.

The users pace bits associated with this change will follow in an
openbsm import.

Reviewed by:	rwatson, (sson, wsalamon (older version))
MFC after:	1 month
2008-11-11 21:57:03 +00:00
..
amd64 Several cleanups related to pipe(2). 2008-11-11 14:55:59 +00:00
arm ARM pmap style(9) and cosmetics. 2008-11-06 16:28:28 +00:00
boot Modify our boot block to pick an output device, without which boot1 will fail 2008-10-31 00:52:31 +00:00
bsm Add support for extended header BSM tokens. Currently we use the 2008-11-11 21:57:03 +00:00
cam Retire the MALLOC and FREE macros. They are an abomination unto style(9). 2008-10-23 15:53:51 +00:00
cddl Require write access on a directory being moved from one parent 2008-11-08 19:56:32 +00:00
compat Sigh. Fix a pointer/int compile error. 2008-11-10 23:36:20 +00:00
conf - Separate PMC class dependent code from other kinds of machine 2008-11-09 17:37:54 +00:00
contrib Fix a number of style issues in the MALLOC / FREE commit. I've tried to 2008-10-23 20:26:15 +00:00
crypto Simplify session selection/allocation. 2008-08-09 20:01:01 +00:00
ddb Collect N identical (or near identical) mkdumpheader() implementations into 2008-10-01 22:08:53 +00:00
dev Fake the assoc id so that ndis can work on the latest net80211. 2008-11-11 03:36:15 +00:00
fs Remove unnecessary locking around vn_fullpath(). The vnode lock for the 2008-11-04 19:04:01 +00:00
gdb Commit SYSINIT() ;-adding patch missed in previous pass. 2008-03-16 13:02:04 +00:00
geom Fix a panic caused by a corrupted table when the header is 2008-11-06 16:51:33 +00:00
gnu Improve VFS locking: 2008-11-02 10:15:42 +00:00
i386 Several cleanups related to pipe(2). 2008-11-11 14:55:59 +00:00
ia64 Retire the MALLOC and FREE macros. They are an abomination unto style(9). 2008-10-23 15:53:51 +00:00
isa MFp4: 2008-11-02 18:48:54 +00:00
kern Several cleanups related to pipe(2). 2008-11-11 14:55:59 +00:00
kgssapi Implement support for RPCSEC_GSS authentication to both the NFS client 2008-11-03 10:38:00 +00:00
libkern Prefix the static shl function with '__' like its parent function __qdivrem to 2008-10-09 20:43:42 +00:00
mips Remove cardbus attachment. It likely was a cut-n-paste left over from 2008-11-02 02:58:24 +00:00
modules - Separate PMC class dependent code from other kinds of machine 2008-11-09 17:37:54 +00:00
net - Use RTFREE_LOCKED macro 2008-11-11 09:40:27 +00:00
net80211 Fix checks for fast frames negotiation. ni_ath_flags holds the 2008-10-30 16:22:04 +00:00
netatalk Retire the MALLOC and FREE macros. They are an abomination unto style(9). 2008-10-23 15:53:51 +00:00
netgraph Don't use curthread to resolve file descriptor. Request may be queued, so 2008-11-08 06:25:57 +00:00
netinet For consistency work on the local object passed into the function for the 2008-11-09 14:06:44 +00:00
netinet6 Add a MAC label, MAC Framework, and MAC policy entry points for IPv6 2008-10-26 22:45:18 +00:00
netipsec Retire the MALLOC and FREE macros. They are an abomination unto style(9). 2008-10-23 15:53:51 +00:00
netipx Retire the MALLOC and FREE macros. They are an abomination unto style(9). 2008-10-23 15:53:51 +00:00
netnatm Retire the MALLOC and FREE macros. They are an abomination unto style(9). 2008-10-23 15:53:51 +00:00
netncp Retire the MALLOC and FREE macros. They are an abomination unto style(9). 2008-10-23 15:53:51 +00:00
netsmb Implement device cloning for /dev/nsmb, the netsmb control pseudo-device. 2008-11-03 14:23:15 +00:00
nfs Replaced the misleading uses of a historical artefact M_TRYWAIT with M_WAIT. 2008-03-25 09:39:02 +00:00
nfs4client Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessary 2008-10-28 13:44:11 +00:00
nfsclient Implement support for RPCSEC_GSS authentication to both the NFS client 2008-11-03 10:38:00 +00:00
nfsserver Range-check NFSv2 procedure numbers before converting to NFSv3. 2008-11-07 10:43:01 +00:00
nlm Implement support for RPCSEC_GSS authentication to both the NFS client 2008-11-03 10:38:00 +00:00
opencrypto Don't hang if encrypting/decrypting using struct iovecs where one of the 2008-10-30 16:11:07 +00:00
pc98 Improved IDE HDD geometry adjustment. Previous code didn't work with 2008-10-27 08:40:13 +00:00
pccard
pci Move mn over. One of the last stragglers in sys/pci. There's no 2008-11-02 17:04:54 +00:00
powerpc Fix compilation in the case when kernel doesn't have KDB ebabled. 2008-10-30 21:02:00 +00:00
rpc Implement support for RPCSEC_GSS authentication to both the NFS client 2008-11-03 10:38:00 +00:00
security Add support for extended header BSM tokens. Currently we use the 2008-11-11 21:57:03 +00:00
sparc64 - Turn off interrupts instead of only entering a critical section 2008-10-28 22:05:20 +00:00
sun4v - In GCC 4.2 __builtin_frame_address() was fixed to include the 2008-10-27 21:31:14 +00:00
sys Several cleanups related to pipe(2). 2008-11-11 14:55:59 +00:00
tools Remove some unused and broken code that attempted to not invoke locking 2008-11-03 19:57:40 +00:00
ufs Quiet a WITNESS warning with the dirhash sx locks by setting the DUPOK 2008-11-04 18:56:12 +00:00
vm Support kernel crash mini dumps on ARM architecture. 2008-11-06 16:20:27 +00:00
xdr Don't return a NULL mbuf from xdrmbuf_getall. 2008-11-05 16:24:31 +00:00
xen Fix evtchn initialization on SMP 2008-10-24 07:57:48 +00:00
Makefile Improve the glimpse target: don't index .svn and compile directories. 2008-08-15 14:11:30 +00:00