d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
f07b836981
freebsd-nq/sys
History
Christian S.J. Peron f07b836981 Correct a slight regression which was introduced with the implementation of 
audit pipes. If the kernel record was not selected for the trail or the pipe,
any user supplied record attached to it would be tossed away, resulting in
otherwise selected events being lost.

- Introduce two new masks: AR_PRESELECT_USER_TRAIL AR_PRESELECT_USER_PIPE,
  currently we have AR_PRESELECT_TRAIL and AR_PRESELECT_PIPE, which tells
  the audit worker that we are interested in the kernel record, with
  the additional masks we can determine if either the pipe or trail is
  interested in seeing the kernel or user record.

- In audit(2), we unconditionally set the AR_PRESELECT_USER_TRAIL and
  AR_PRESELECT_USER_PIPE masks under the assumption that userspace has
  done the preselection [1].

Currently, there is work being done that allows the kernel to parse and
preselect user supplied records, so in the future preselection could occur
in either layer. But there is still a few details to work out here.

[1] At some point we need to teach au_preselect(3) about the interests of
    all the individual audit pipes.

This is a RELENG_6 candidate.

Reviewed by:	rwatson
Obtained from:	TrustedBSD Project
MFC after:	1 week
2006-09-17 17:52:57 +00:00
..
amd64 Make cpu_set_upcall_kse() and cpu_set_user_tls() work for 32bit process. 2006-09-17 14:54:14 +00:00
arm MFp4: first cut at getting I2C transfers working (generically). I'm 2006-09-07 21:53:28 +00:00
boot - Include <sys/reboot.h> to get the RB_* defines. 2006-09-05 19:28:03 +00:00
bsm Merge OpenBSM 1.0 alpha 10 changes into src/sys/bsm; comment spelling 2006-09-02 10:49:44 +00:00
cam Don't allow attachment of disks that could cause GEOM to panic. 2006-09-16 21:21:07 +00:00
coda Since DELAY() was moved, most <machine/clock.h> #includes have been 2006-05-16 14:37:58 +00:00
compat Regenerate. 2006-09-17 13:29:36 +00:00
conf Include agp_i810.c in amd64 AGP builds to get support for the Intel 915 Express 2006-09-05 16:55:13 +00:00
contrib Introduce a new entry point, mac_create_mbuf_from_firewall. This entry point 2006-09-12 04:25:13 +00:00
crypto Less magic. 2006-09-15 10:44:55 +00:00
ddb Fix two nits in the ps header that offset each other making them largely 2006-08-01 22:30:55 +00:00
dev Move ethernet VLAN tags from mtags to its own mbuf packet header field 2006-09-17 13:33:30 +00:00
fs Put the osta.c license on osta.h. The license is the same. 2006-09-12 19:02:34 +00:00
gdb Convert to new console api 2006-05-26 13:54:27 +00:00
geom Fix detecting of UFS1 label when mediasize%fragsize != 0. 2006-09-16 11:24:41 +00:00
gnu Add snd_emu10kx driver for Creative SoundBlaster Live! and Audigy series 2006-07-15 19:36:28 +00:00
i4b Extend i4b to support CAPI manager based ISDN controllers (CAPI manager is part of 2006-07-09 21:16:06 +00:00
i386 Remove duplicated code. Declare functions non-static that shouldn't be 2006-09-13 09:35:59 +00:00
ia64 Add audit hooks for ppc, ia64 system call paths. 2006-09-16 17:03:02 +00:00
isa Eliminate one set of XBOX #ifdefs. The Xbox code just needs to set a 2006-08-09 23:47:38 +00:00
isofs/cd9660 Remove calls to vfs_export() for exporting a filesystem for NFS mounting 2006-05-26 00:32:21 +00:00
kern Remove VLAN mtag UMA zones and initialize ether_vtag and tso_segsz packet 2006-09-17 13:44:32 +00:00
libkern Add strstr() function to the libkern. 2006-08-12 15:28:39 +00:00
modules Introduce a new entry point, mac_create_mbuf_from_firewall. This entry point 2006-09-12 04:25:13 +00:00
net Move ethernet VLAN tags from mtags to its own mbuf packet header field 2006-09-17 13:33:30 +00:00
net80211 Move ethernet VLAN tags from mtags to its own mbuf packet header field 2006-09-17 13:33:30 +00:00
netatalk Since soisdisconnected() is no longer called in pru_detach(), call it 2006-08-05 14:14:34 +00:00
netatm Change semantics of socket close and detach. Add a new protocol switch 2006-07-21 17:11:15 +00:00
netgraph Move ethernet VLAN tags from mtags to its own mbuf packet header field 2006-09-17 13:33:30 +00:00
netinet Make tcp_usr_send() free the passed mbufs on error in all cases as the 2006-09-17 13:39:35 +00:00
netinet6 Make it possible to add an IPv6 host route to a host directly connected. 2006-09-16 06:24:28 +00:00
netipsec Fix build breakage from previous commit which confused key_abort and key_close. 2006-07-22 09:18:02 +00:00
netipx Change semantics of socket close and detach. Add a new protocol switch 2006-07-21 17:11:15 +00:00
netkey With exception of the if_name() macro, all definitions in net_osdep.h 2006-08-04 21:27:40 +00:00
netnatm Change semantics of socket close and detach. Add a new protocol switch 2006-07-21 17:11:15 +00:00
netncp - Fix ncp_poll() to not panic if the socket doesn't have any pending data. 2006-08-03 15:31:52 +00:00
netsmb Fix misalignment bugs caused by invalid type casts of pointers 2006-08-22 03:05:51 +00:00
nfs
nfs4client Fixes up the handling of shared vnode lock lookups in the NFS client, 2006-09-13 18:39:09 +00:00
nfsclient Fixes up the handling of shared vnode lock lookups in the NFS client, 2006-09-13 18:39:09 +00:00
nfsserver - Add a new function nfsrv_destroycache() to tear down the server request 2006-08-01 16:27:14 +00:00
opencrypto When DIAGNOSTIC is defined, verify if we don't free crypto requests from 2006-06-06 15:04:52 +00:00
pc98 Fix style nits. No md5 changes in .o's. ;-) 2006-09-08 21:46:01 +00:00
pccard
pci Whitespace nits. 2006-09-15 11:01:23 +00:00
posix4 Backout the feature which can change thread's scheduling option, I really 2006-07-13 06:41:26 +00:00
powerpc Add audit hooks for ppc, ia64 system call paths. 2006-09-16 17:03:02 +00:00
rpc
security Correct a slight regression which was introduced with the implementation of 2006-09-17 17:52:57 +00:00
sparc64 Do as the USII CPU manual suggests and leave interrupts enabled 2006-09-03 21:20:21 +00:00
sys Move ethernet VLAN tags from mtags to its own mbuf packet header field 2006-09-17 13:33:30 +00:00
tools Check for errors when registering and unregistering firmware modules. This 2006-06-16 21:06:03 +00:00
ufs While checking for update of snapshot file in the ffs_copyonwrite, 2006-08-21 17:20:19 +00:00
vm Make vm_page_release_contig() static. 2006-09-03 22:24:08 +00:00
Makefile Don't need to special case arm here anymore 2006-08-10 06:29:43 +00:00