When mmap(2) is used with a vnode, capture vnode attributes in the
audit trail. This was not required for Common Criteria auditing (which requires only that the intent to read or write be audited at the time of open(2)), but is useful for contemporary live analysis and forensics. MFC after: 3 days Sponsored by: DARPA, AFRL
This commit is contained in:
parent
0e1cdf8ba6
commit
0df4264748
@ -1245,6 +1245,7 @@ vm_mmap_vnode(struct thread *td, vm_size_t objsize,
|
||||
locktype = LK_SHARED;
|
||||
if ((error = vget(vp, locktype, td)) != 0)
|
||||
return (error);
|
||||
AUDIT_ARG_VNODE1(vp);
|
||||
foff = *foffp;
|
||||
flags = *flagsp;
|
||||
obj = vp->v_object;
|
||||
|
Loading…
Reference in New Issue
Block a user