When mmap(2) is used with a vnode, capture vnode attributes in the

audit trail.  This was not required for Common Criteria auditing
(which requires only that the intent to read or write be audited
at the time of open(2)), but is useful for contemporary live
analysis and forensics.

MFC after:	3 days
Sponsored by:	DARPA, AFRL
This commit is contained in:
rwatson 2016-07-10 11:49:10 +00:00
parent d023278015
commit 102f19bf69

View File

@ -1245,6 +1245,7 @@ vm_mmap_vnode(struct thread *td, vm_size_t objsize,
locktype = LK_SHARED;
if ((error = vget(vp, locktype, td)) != 0)
return (error);
AUDIT_ARG_VNODE1(vp);
foff = *foffp;
flags = *flagsp;
obj = vp->v_object;