84f8c77a42
- Add a new "qsize" parameter in audit_control and the getacqsize(3) API to query it, allowing to set the kernel's maximum audit queue length. - Add support to push a mapping between audit event names and event numbers into the kernel (where supported) using new A_GETEVENT and A_SETEVENT auditon(2) operations. - Add audit event identifiers for a number of new (and not-so-new) FreeBSD system calls including those for asynchronous I/O, thread management, SCTP, jails, multi-FIB support, and misc. POSIX interfaces such as posix_fallocate(2) and posix_fadvise(2). - On operating systems supporting Capsicum, auditreduce(1) and praudit(1) now run sandboxed. - Empty "flags" and "naflags" fields are now permitted in audit_control(5). Many thanks to Christian Brueffer for producing the OpenBSM release and importing/tagging it in the vendor branch. This release will allow improved auditing of a range of new FreeBSD functionality, as well as non-traditional events (e.g., fine-grained I/O auditing) not required by the Orange Book or Common Criteria. Obtained from: TrustedBSD Project Sponsored by: DARPA, AFRL MFC after: 3 weeks
30 lines
547 B
Makefile
30 lines
547 B
Makefile
if USE_NATIVE_INCLUDES
|
|
INCLUDES = -I$(top_builddir) -I$(top_srcdir)
|
|
else
|
|
INCLUDES = -I$(top_builddir) -I$(top_srcdir) -I$(top_srcdir)/sys
|
|
endif
|
|
|
|
sbin_PROGRAMS = auditdistd
|
|
man5_MANS = auditdistd.conf.5
|
|
man8_MANS = auditdistd.8
|
|
YFLAGS = -d
|
|
auditdistd_CFLAGS = -Wno-format
|
|
auditdistd_LDFLAGS = -lcrypto
|
|
|
|
auditdistd_SOURCES = \
|
|
auditdistd.c \
|
|
parse.y \
|
|
pjdlog.c \
|
|
proto.c \
|
|
proto_common.c \
|
|
proto_socketpair.c \
|
|
proto_tcp.c \
|
|
proto_tls.c \
|
|
proto_uds.c \
|
|
receiver.c \
|
|
sandbox.c \
|
|
sender.c \
|
|
subr.c \
|
|
token.l \
|
|
trail.c
|