Use SYS_AUE_<syscallname> to include the appropriate audit event identifier
for syscalls in kld's, even when compiled into the kernel statically. Note that since this hardcodes the SYS_ prefix SYSCALL_MODULE_HELPER() now only works for native ABI system calls. Those are the only ones that used the macro anyway, and I chose to not require a second argument to the macro to specify the prefix or audit event directly.
This commit is contained in:
parent
f8f1f7fb85
commit
57d6c87c0e
@ -121,7 +121,7 @@ struct syscall_module_data {
|
|||||||
|
|
||||||
#define SYSCALL_MODULE(name, offset, new_sysent, evh, arg) \
|
#define SYSCALL_MODULE(name, offset, new_sysent, evh, arg) \
|
||||||
static struct syscall_module_data name##_syscall_mod = { \
|
static struct syscall_module_data name##_syscall_mod = { \
|
||||||
evh, arg, offset, new_sysent, { 0, NULL } \
|
evh, arg, offset, new_sysent, { 0, NULL, AUE_NULL } \
|
||||||
}; \
|
}; \
|
||||||
\
|
\
|
||||||
static moduledata_t name##_mod = { \
|
static moduledata_t name##_mod = { \
|
||||||
@ -136,7 +136,8 @@ static int syscallname##_syscall = SYS_##syscallname; \
|
|||||||
static struct sysent syscallname##_sysent = { \
|
static struct sysent syscallname##_sysent = { \
|
||||||
(sizeof(struct syscallname ## _args ) \
|
(sizeof(struct syscallname ## _args ) \
|
||||||
/ sizeof(register_t)), \
|
/ sizeof(register_t)), \
|
||||||
(sy_call_t *)& syscallname \
|
(sy_call_t *)& syscallname, \
|
||||||
|
SYS_AUE_##syscallname \
|
||||||
}; \
|
}; \
|
||||||
SYSCALL_MODULE(syscallname, \
|
SYSCALL_MODULE(syscallname, \
|
||||||
& syscallname##_syscall, & syscallname##_sysent, \
|
& syscallname##_syscall, & syscallname##_sysent, \
|
||||||
|
Loading…
x
Reference in New Issue
Block a user