Use SYS_AUE_<syscallname> to include the appropriate audit event identifier
for syscalls in kld's, even when compiled into the kernel statically. Note that since this hardcodes the SYS_ prefix SYSCALL_MODULE_HELPER() now only works for native ABI system calls. Those are the only ones that used the macro anyway, and I chose to not require a second argument to the macro to specify the prefix or audit event directly.
This commit is contained in:
parent
f8f1f7fb85
commit
57d6c87c0e
@ -121,7 +121,7 @@ struct syscall_module_data {
|
||||
|
||||
#define SYSCALL_MODULE(name, offset, new_sysent, evh, arg) \
|
||||
static struct syscall_module_data name##_syscall_mod = { \
|
||||
evh, arg, offset, new_sysent, { 0, NULL } \
|
||||
evh, arg, offset, new_sysent, { 0, NULL, AUE_NULL } \
|
||||
}; \
|
||||
\
|
||||
static moduledata_t name##_mod = { \
|
||||
@ -136,7 +136,8 @@ static int syscallname##_syscall = SYS_##syscallname; \
|
||||
static struct sysent syscallname##_sysent = { \
|
||||
(sizeof(struct syscallname ## _args ) \
|
||||
/ sizeof(register_t)), \
|
||||
(sy_call_t *)& syscallname \
|
||||
(sy_call_t *)& syscallname, \
|
||||
SYS_AUE_##syscallname \
|
||||
}; \
|
||||
SYSCALL_MODULE(syscallname, \
|
||||
& syscallname##_syscall, & syscallname##_sysent, \
|
||||
|
Loading…
x
Reference in New Issue
Block a user