freebsd-skq/sys/security
Robert Watson 09daf1c828 Add support for audit pipe special devices, which allow user space
applications to insert a "tee" in the live audit event stream.  Records
are inserted into a per-clone queue so that user processes can pull
discreet records out of the queue.  Unlike delivery to disk, audit pipes
are "lossy", dropping records in low memory conditions or when the
process falls behind real-time events.  This mechanism is appropriate
for use by live monitoring systems, host-based intrusion detection, etc,
and avoids applications having to dig through active on-disk trails that
are owned by the audit daemon.

Obtained from:	TrustedBSD Project
2006-02-06 22:50:39 +00:00
..
audit Add support for audit pipe special devices, which allow user space 2006-02-06 22:50:39 +00:00
mac Lock object while we iterate through it's backing objects. 2005-10-09 02:37:27 +00:00
mac_biba Introduce a new sysctl variable: 2005-12-31 05:06:59 +00:00
mac_bsdextended Fix potential overrun of static stack allocated array which stores 2006-01-15 01:02:20 +00:00
mac_ifoff
mac_lomac Normalize a significant number of kernel malloc type names: 2005-10-31 15:41:29 +00:00
mac_mls Add #include <sys/sx.h>, devfs is going to require this shortly. 2005-09-19 18:52:51 +00:00
mac_none Add #include <sys/sx.h>, devfs is going to require this shortly. 2005-09-19 18:52:51 +00:00
mac_partition Add #include <sys/sx.h>, devfs is going to require this shortly. 2005-09-19 18:52:51 +00:00
mac_portacl Normalize a significant number of kernel malloc type names: 2005-10-31 15:41:29 +00:00
mac_seeotheruids Allow the root user to be aware of other credentials by virtue 2005-09-30 23:41:10 +00:00
mac_stub Add #include <sys/sx.h>, devfs is going to require this shortly. 2005-09-19 18:52:51 +00:00
mac_test Add #include <sys/sx.h>, devfs is going to require this shortly. 2005-09-19 18:52:51 +00:00