src/sys/security/audit, branch release/7.0.0_cvs

This commit was manufactured by cvs2svn to create tag

2008-02-24T05:45:17+00:00

'RELENG_7_0_0_RELEASE'.

This commit was manufactured to restore the state of the 7.0-RELEASE image.

MFC revision 1.23

2008-02-05T14:36:41+00:00

Make sure we handle listen() and eliminate console messages for unknown
event types.

Approved by:	re@ (kensmith)

MFC revision 1.13

2007-11-04T16:44:48+00:00

Make sure we are incrementing read counters

Approved by:	re@ (kensmith)

Merge audit.c:1.35, audit_bsm_klib.c:1.8 from HEAD to RELENG_7:

2007-11-02T09:53:32+00:00

  Replace use of AU_NULL with 0 when no audit classes are in use; this
  supports the removal of hard-coded audit class constants in OpenBSM
  1.0.  All audit classes are now dynamically configured via the
  audit_class database.

  Obtained from:  TrustedBSD Project

Approved by:	re (kensmith)

MFC revision 1.21, use extended process tokens by default

2007-11-01T19:03:03+00:00

Approved by:	re@ (kensmith)

MFC audit_pipe.c revision 1.12

2007-10-20T15:11:00+00:00

Approved by:	re@ (kensmith)

Remove two boot printfs generated by Audit to announce it's presence,

2007-07-01T20:51:30+00:00

and replace with software-testable sysctl node (security.audit) that
can be used to detect kernel audit support.

Obtained from:	TrustedBSD Project
Approved by:	re (kensmith)

- Add audit_arg_audinfo_addr() for auditing the arguments for setaudit_addr(2)

2007-06-27T17:01:15+00:00

- In audit_bsm.c, make sure all the arguments: ARG_AUID, ARG_ASID, ARG_AMASK,
  and ARG_TERMID{_ADDR} are valid before auditing their arguments. (This is done
  for both setaudit and setaudit_addr.
- Audit the arguments passed to setaudit_addr(2)
- AF_INET6 does not equate to AU_IPv6. Change this in au_to_in_addr_ex() so the
  audit token is created with the correct type. This fixes the processing of the
  in_addr_ex token in users pace.
- Change the size of the token (as generated by the kernel) from 5*4 bytes to
  4*4 bytes (the correct size of an ip6 address)
- Correct regression from ucred work which resulted in getaudit() not returning
  E2BIG if the subject had an ip6 termid
- Correct slight regression in getaudit(2) which resulted in the size of a pointer
  being passed instead of the size of the structure. (This resulted in invalid
  auditinfo data being returned via getaudit(2))

Reviewed by:	rwatson
Approved by:	re@ (kensmith)
Obtained from:	TrustedBSD Project
MFC after:	1 month

Add a new MAC framework and policy entry point,

2007-06-26T14:14:01+00:00

mpo_check_proc_setaudit_addr to be used when controlling use of
setaudit_addr(), rather than mpo_check_proc_setaudit(), which takes a
different argument type.

Reviewed by:	csjp
Approved by:	re (kensmith)

In setaudit_addr(), drop the process lock in error cases.

2007-06-15T15:20:56+00:00

Submitted by:	Peter Holm  (BugMaster)