Audit AUE_MAC_EXECVE; currently just the standard AUE_EXECVE arguments
and not the label. Obtained from: TrustedBSD Project Sponsored by: Apple, Inc. MFC after: 1 week
This commit is contained in:
parent
4349e4002b
commit
0f48dc75aa
@ -791,6 +791,7 @@ kaudit_to_bsm(struct kaudit_record *kar, struct au_record **pau)
|
|||||||
/* FALLTHROUGH */
|
/* FALLTHROUGH */
|
||||||
|
|
||||||
case AUE_EXECVE:
|
case AUE_EXECVE:
|
||||||
|
case AUE_MAC_EXECVE:
|
||||||
if (ARG_IS_VALID(kar, ARG_ARGV)) {
|
if (ARG_IS_VALID(kar, ARG_ARGV)) {
|
||||||
tok = au_to_exec_args(ar->ar_arg_argv,
|
tok = au_to_exec_args(ar->ar_arg_argv,
|
||||||
ar->ar_arg_argc);
|
ar->ar_arg_argc);
|
||||||
|
Loading…
x
Reference in New Issue
Block a user