src/sys/security, branch releng/8.0

Merge r196122 from head to stable/8:

2009-08-13T15:01:50+00:00

  Correctly audit real gids following changes to the audit record argument
  interface.

Approved by:	re (kib)

Eliminate ARG_UPATH[12] arguments to AUDIT_ARG_UPATH() and instead

2009-07-29T07:44:43+00:00

provide specific macros, AUDIT_ARG_UPATH1() and AUDIT_ARG_UPATH2()
to capture path information for audit records.  This allows us to
move the definitions of ARG_* out of the public audit header file,
as they are an implementation detail of our current kernel-internal
audit record, which may change.

Approved by:	re (kensmith)
Obtained from:	TrustedBSD Project
MFC after:	1 month

Rework vnode argument auditing to follow the same structure, in order

2009-07-28T21:52:24+00:00

to avoid exposing ARG_ macros/flag values outside of the audit code in
order to name which one of two possible vnodes will be audited for a
system call.

Approved by:	re (kib)
Obtained from:	TrustedBSD Project
MFC after:	1 month

Audit file descriptors passed to fooat(2) system calls, which are used

2009-07-28T21:39:58+00:00

instead of the root/current working directory as the starting point for
lookups.  Up to two such descriptors can be audited.  Add audit record
BSM encoding for fooat(2).

Note: due to an error in the OpenBSM 1.1p1 configuration file, a
further change is required to that file in order to fix openat(2)
auditing.

Approved by:	re (kib)
Reviewed by:	rdivacky (fooat(2) portions)
Obtained from:	TrustedBSD Project
MFC after:	1 month

Import OpenBSM 1.1p1 from vendor branch to 8-CURRENT, populating

2009-07-17T14:02:20+00:00

contrib/openbsm and a subset also imported into sys/security/audit.
This patch release addresses several minor issues:

- Fixes to AUT_SOCKUNIX token parsing.
- IPv6 support for au_to_me(3).
- Improved robustness in the parsing of audit_control, especially long
  flags/naflags strings and whitespace in all fields.
- Add missing conversion of a number of FreeBSD/Mac OS X errnos to/from BSM
  error number space.

MFC after:	3 weeks
Obtained from:	TrustedBSD Project
Sponsored by:	Apple, Inc.
Approved by:	re (kib)

Create audit records for AUE_POSIX_OPENPT, currently w/o arguments.

2009-07-02T16:33:38+00:00

Approved by:	re (audit argument blanket)

Fix comment misthink.

2009-07-02T09:50:13+00:00

Submitted by:	b. f. 
Approved by:	re (audit argument blanket)
MFC after:	1 week

Clean up a number of aspects of token generation from audit arguments to

2009-07-02T09:15:30+00:00

system calls:

- Centralize generation of argument tokens for VM addresses in a macro,
  ADDR_TOKEN(), and properly encode 64-bit addresses in 64-bit arguments.
- Fix up argument numbers across a large number of syscalls so that they
  match the numeric argument into the system call.
- Don't audit the address argument to ioctl(2) or ptrace(2), but do keep
  generating tokens for mmap(2), minherit(2), since they relate to passing
  object access across execve(2).

Approved by:	re (audit argument blanket)
Obtained from:	TrustedBSD Project
MFC after:	1 week

For access(2) and eaccess(2), audit the requested access mode.

2009-07-01T22:47:45+00:00

Approved by:	re (audit argument blanket)
MFC after:	3 days

Define missing audit argument macro AUDIT_ARG_SOCKET(), and

2009-07-01T18:54:49+00:00

capture the domain, type, and protocol arguments to socket(2)
and socketpair(2).

Approved by:	re (audit argument blanket)
MFC after:	3 days