Use audit events AUE_SHMOPEN and AUE_SHMUNLINK with new system calls
shm_open() and shm_unlink(). More auditing will need to be done for these calls to capture arguments properly.
This commit is contained in:
parent
87cb56f6df
commit
6c902059f2
@ -796,6 +796,6 @@
|
||||
480 AUE_FTRUNCATE STD { int freebsd32_ftruncate(int fd, \
|
||||
u_int32_t lengthlo, u_int32_t lengthhi); }
|
||||
481 AUE_KILL NOPROTO { int thr_kill2(pid_t pid, long id, int sig); }
|
||||
482 AUE_NULL NOPROTO { int shm_open(const char *path, int flags, \
|
||||
482 AUE_SHMOPEN NOPROTO { int shm_open(const char *path, int flags, \
|
||||
mode_t mode); }
|
||||
483 AUE_NULL NOPROTO { int shm_unlink(const char *path); }
|
||||
483 AUE_SHMUNLINK NOPROTO { int shm_unlink(const char *path); }
|
||||
|
@ -847,8 +847,8 @@
|
||||
479 AUE_TRUNCATE STD { int truncate(char *path, off_t length); }
|
||||
480 AUE_FTRUNCATE STD { int ftruncate(int fd, off_t length); }
|
||||
481 AUE_KILL STD { int thr_kill2(pid_t pid, long id, int sig); }
|
||||
482 AUE_NULL STD { int shm_open(const char *path, int flags, \
|
||||
482 AUE_SHMOPEN STD { int shm_open(const char *path, int flags, \
|
||||
mode_t mode); }
|
||||
483 AUE_NULL STD { int shm_unlink(const char *path); }
|
||||
483 AUE_SHMUNLINK STD { int shm_unlink(const char *path); }
|
||||
; Please copy any additions and changes to the following compatability tables:
|
||||
; sys/compat/freebsd32/syscalls.master
|
||||
|
Loading…
x
Reference in New Issue
Block a user