Audit AUE_MAC_EXECVE; currently just the standard AUE_EXECVE arguments
and not the label. Obtained from: TrustedBSD Project Sponsored by: Apple, Inc. MFC after: 1 week
This commit is contained in:
parent
4349e4002b
commit
0f48dc75aa
@ -791,6 +791,7 @@ kaudit_to_bsm(struct kaudit_record *kar, struct au_record **pau)
|
||||
/* FALLTHROUGH */
|
||||
|
||||
case AUE_EXECVE:
|
||||
case AUE_MAC_EXECVE:
|
||||
if (ARG_IS_VALID(kar, ARG_ARGV)) {
|
||||
tok = au_to_exec_args(ar->ar_arg_argv,
|
||||
ar->ar_arg_argc);
|
||||
|
Loading…
x
Reference in New Issue
Block a user