Changeset View
Changeset View
Standalone View
Standalone View
sys/security/audit/audit_bsm.c
Show First 20 Lines • Show All 1,070 Lines • ▼ Show 20 Lines | kaudit_to_bsm(struct kaudit_record *kar, struct au_record **pau) | ||||
case AUE_FLOCK: | case AUE_FLOCK: | ||||
if (ARG_IS_VALID(kar, ARG_CMD)) { | if (ARG_IS_VALID(kar, ARG_CMD)) { | ||||
tok = au_to_arg32(2, "operation", ar->ar_arg_cmd); | tok = au_to_arg32(2, "operation", ar->ar_arg_cmd); | ||||
kau_write(rec, tok); | kau_write(rec, tok); | ||||
} | } | ||||
FD_VNODE1_TOKENS; | FD_VNODE1_TOKENS; | ||||
break; | break; | ||||
case AUE_FSPACECTL: | |||||
if (ARG_IS_VALID(kar, ARG_CMD)) { | |||||
tok = au_to_arg32(2, "operation", ar->ar_arg_cmd); | |||||
kau_write(rec, tok); | |||||
} | |||||
if (ARG_IS_VALID(kar, ARG_FFLAGS)) { | |||||
tok = au_to_arg32(4, "flags", ar->ar_arg_fflags); | |||||
kau_write(rec, tok); | |||||
} | |||||
FD_VNODE1_TOKENS; | |||||
break; | |||||
case AUE_RFORK: | case AUE_RFORK: | ||||
if (ARG_IS_VALID(kar, ARG_FFLAGS)) { | if (ARG_IS_VALID(kar, ARG_FFLAGS)) { | ||||
tok = au_to_arg32(1, "flags", ar->ar_arg_fflags); | tok = au_to_arg32(1, "flags", ar->ar_arg_fflags); | ||||
kau_write(rec, tok); | kau_write(rec, tok); | ||||
} | } | ||||
/* FALLTHROUGH */ | /* FALLTHROUGH */ | ||||
case AUE_FORK: | case AUE_FORK: | ||||
▲ Show 20 Lines • Show All 747 Lines • Show Last 20 Lines |