aboutsummaryrefslogtreecommitdiff
path: root/sys/security/audit/audit_bsm.c
Commit message (Expand)AuthorAgeFilesLines
* Change the cap_rights_t type from uint64_t to a structure that we can extendPawel Jakub Dawidek2013-09-051-2/+1
* - Implement two new system calls:Pawel Jakub Dawidek2013-03-021-0/+15
* Merge Capsicum overhaul:Pawel Jakub Dawidek2013-03-021-1/+14
* Remove redundant check.Pawel Jakub Dawidek2013-02-171-3/+1
* Implement the zonename token for jailed processes. IfChristian S.J. Peron2013-01-171-2/+11
* IFp4 @208452:Pawel Jakub Dawidek2012-11-301-7/+11
* Provide ability to audit cap_rights_t arguments.Jonathan Anderson2011-07-181-0/+22
* Add a case to make sure that internal audit records get convertedChristian S.J. Peron2010-05-041-0/+1
* Make sure we convert audit records that were produced as the result of theChristian S.J. Peron2010-01-311-0/+7
* Audit file descriptors passed to fooat(2) system calls, which are usedRobert Watson2009-07-281-0/+75
* Create audit records for AUE_POSIX_OPENPT, currently w/o arguments.Robert Watson2009-07-021-0/+1
* Fix comment misthink.Robert Watson2009-07-021-1/+1
* Clean up a number of aspects of token generation from audit arguments toRobert Watson2009-07-021-69/+55
* For access(2) and eaccess(2), audit the requested access mode.Robert Watson2009-07-011-2/+9
* When auditing unmount(2), capture FSID arguments as regular text stringsRobert Watson2009-07-011-0/+8
* Audit the file descriptor number passed to lseek(2).Robert Watson2009-07-011-1/+1
* udit the 'options' argument to wait4(2).Robert Watson2009-07-011-0/+4
* Merge OpenBSM 1.1 changes to the FreeBSD 8.x kernel:Robert Watson2009-04-191-23/+68
* Audit AUE_MAC_EXECVE; currently just the standard AUE_EXECVE argumentsRobert Watson2009-02-081-0/+1
* Audit the flag argument to the nfssvc(2) system call.Robert Watson2009-02-081-2/+8
* Call au_errno_to_bsm() on the errno value passed into au_to_return32()Robert Watson2008-12-311-1/+1
* Regularize /* FALLTHROUGH */ comments in the BSM event type switch, andRobert Watson2008-11-251-6/+10
* Add support for extended header BSM tokens. Currently we use theChristian S.J. Peron2008-11-111-2/+23
* More fully audit fexecve(2) and its arguments.Robert Watson2008-08-251-0/+7
* If an AUE_SYSCTL_NONADMIN audit event is selected, generate a recordRobert Watson2008-07-221-0/+1
* Further minor style fixes to audit.Robert Watson2008-07-221-5/+10
* Remove unneeded \ at the end of a macro.Robert Watson2008-07-221-1/+1
* Further minor white space tweaks.Robert Watson2008-07-221-2/+2
* Generally avoid <space><tab> as a white space anomoly.Robert Watson2008-07-221-7/+7
* Use #define<tab> rather than #define<space>.Robert Watson2008-07-221-8/+8
* Comment fix.Robert Watson2008-07-221-1/+1
* Comment typo fix.Robert Watson2008-07-221-1/+1
* In preparation to sync Apple and FreeBSD versions of security audit,Robert Watson2008-07-221-2/+2
* Use __FBSDID() for $FreeBSD$ IDs in the audit code.Robert Watson2008-04-131-2/+3
* Rename several audit functions in the global kernel symbol namespace toRobert Watson2008-02-251-2/+2
* Fix gratuitous whitespace bugChristian S.J. Peron2008-01-181-1/+2
* Add a case for AUE_LISTEN. This removes the following console error message:Christian S.J. Peron2008-01-181-0/+1
* Implement AUE_CORE, which adds process core dump support into the kernel.Christian S.J. Peron2007-10-261-0/+8
* Use extended process token. The in kernel process auditChristian S.J. Peron2007-10-241-2/+2
* Remove two boot printfs generated by Audit to announce it's presence,Robert Watson2007-07-011-1/+0
* - Add audit_arg_audinfo_addr() for auditing the arguments for setaudit_addr(2)Christian S.J. Peron2007-06-271-2/+35
* Clean up, and sometimes remove, a number of audit-related implementationRobert Watson2007-06-111-3/+0
* Clean up audit comments--formatting, spelling, etc.Robert Watson2007-06-011-3/+2
* Fix the handling of IPv6 addresses for subject and process BSM auditChristian S.J. Peron2007-04-131-10/+34
* Add BSM conversion switch entries for a number of system calls, manyRobert Watson2006-10-031-7/+43
* Rather than allocating all buffer memory for the completed BSM recordRobert Watson2006-09-201-19/+17
* Make sure that lutimes(2) gets processed and converted into a BSM record.Christian S.J. Peron2006-09-181-0/+1
* Add AUE_SYSARCH to the list of audit events during BSM conversion to preventRobert Watson2006-09-171-0/+1
* Add a BSM conversion switch case for AUE_GETCWD, so that a consoleRobert Watson2006-09-091-0/+3
* Audit the argv and env vectors passed in on exec:Wayne Salamon2006-09-011-1/+14