When mmap(2) is used with a vnode, capture vnode attributes in the

audit trail.  This was not required for Common Criteria auditing
(which requires only that the intent to read or write be audited
at the time of open(2)), but is useful for contemporary live
analysis and forensics.

MFC after:	3 days
Sponsored by:	DARPA, AFRL
This commit is contained in:
Robert Watson 2016-07-10 11:49:10 +00:00
parent 0e1cdf8ba6
commit 0df4264748

View File

@ -1245,6 +1245,7 @@ vm_mmap_vnode(struct thread *td, vm_size_t objsize,
locktype = LK_SHARED;
if ((error = vget(vp, locktype, td)) != 0)
return (error);
AUDIT_ARG_VNODE1(vp);
foff = *foffp;
flags = *flagsp;
obj = vp->v_object;