2006-02-02 10:15:30 +00:00
|
|
|
#
|
|
|
|
|
# $FreeBSD$
|
|
|
|
|
#
|
|
|
|
|
|
2020-11-16 17:20:35 +00:00
|
|
|
.include <src.opts.mk>
|
|
|
|
|
|
2017-03-04 11:38:03 +00:00
|
|
|
OPENBSMDIR=${SRCTOP}/contrib/openbsm
|
2006-02-02 10:15:30 +00:00
|
|
|
.PATH: ${OPENBSMDIR}/bin/praudit
|
|
|
|
|
|
Merge OpenBSM 1.2-alpha5 from vendor branch to FreeBSD -CURRENT:
- Add a new "qsize" parameter in audit_control and the getacqsize(3) API to
query it, allowing to set the kernel's maximum audit queue length.
- Add support to push a mapping between audit event names and event numbers
into the kernel (where supported) using new A_GETEVENT and A_SETEVENT
auditon(2) operations.
- Add audit event identifiers for a number of new (and not-so-new) FreeBSD
system calls including those for asynchronous I/O, thread management, SCTP,
jails, multi-FIB support, and misc. POSIX interfaces such as
posix_fallocate(2) and posix_fadvise(2).
- On operating systems supporting Capsicum, auditreduce(1) and praudit(1) now
run sandboxed.
- Empty "flags" and "naflags" fields are now permitted in audit_control(5).
Many thanks to Christian Brueffer for producing the OpenBSM release and
importing/tagging it in the vendor branch. This release will allow improved
auditing of a range of new FreeBSD functionality, as well as non-traditional
events (e.g., fine-grained I/O auditing) not required by the Orange Book or
Common Criteria.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, AFRL
MFC after: 3 weeks
2017-03-26 21:14:49 +00:00
|
|
|
CFLAGS+= -I${OPENBSMDIR}
|
|
|
|
|
|
2006-02-02 10:15:30 +00:00
|
|
|
PROG= praudit
|
|
|
|
|
MAN= praudit.1
|
|
|
|
|
|
2010-01-02 11:07:44 +00:00
|
|
|
WARNS?= 3
|
|
|
|
|
|
2014-11-25 16:57:27 +00:00
|
|
|
LIBADD= bsm
|
2006-02-02 10:15:30 +00:00
|
|
|
|
2018-06-17 17:31:16 +00:00
|
|
|
HAS_TESTS=
|
|
|
|
|
SUBDIR.${MK_TESTS}+= tests
|
|
|
|
|
|
2006-02-02 10:15:30 +00:00
|
|
|
.include <bsd.prog.mk>
|
