Currently kernel audit events for jail_set(2), jail_get(2), jail_attach(2),
jail_remove(2) and finally setloginclass(2) are not being converted and
committed into userspace. Add the cases for these syscalls and make sure
they are being converted properly.
Details
Details
After the change I see records being converted and committed to userspace:
header,102,11,jail_set(2),0,Fri Feb 28 18:24:42 2020, + 482 msec path,/ attribute,755,root,0,90,2,5064 subject,root,root,0,root,0,886,0,0,0.0.0.0 return,success,1 trailer,102
Diff Detail
Diff Detail
- Repository
- rS FreeBSD src repository - subversion
- Lint
Lint Passed - Unit
No Test Coverage - Build Status
Buildable 29684 Build 27537: arc lint + arc unit