Change Details

Included here: - audit_event addition (whoops, need to send this upstream) - AUDIT_ARG_FD(*) in sys_close_range - Plumb the fds out in kaudit_to_bsm Tested by make -j4 buildkernel installkernel, manually installing audit_event, reboot, fire up auditd and execute a close_range. ``` root@viper:/var/audit# praudit -l current | grep -i close_range header,90,11,close_range(2),0,Fri Apr 24 02:00:21 2020, + 943 msec,argument,1,0xffffffff,fd,argument,2,0xffffffff,fd,subject,-1,root,0,root,0,1484,0,0,0.0.0.0,return,success,0,trailer,90, ```

Included here: - audit_event addition (whoops, need to send this upstream) - AUDIT_ARG_FD(*) in sys_close_range - Plumb the fds out in kaudit_to_bsm Tested by make -j4 buildkernel installkernel, manually installing audit_event, reboot, fire up auditd and execute a close_range.

Included here: - audit_event addition (whoops, need to send this upstream) - AUDIT_ARG_FD(*) in sys_close_range - Plumb the fds out in kaudit_to_bsm Tested by make -j4 buildkernel installkernel, manually installing audit_event, reboot, fire up auditd and execute a close_range. ``` root@viper:/var/audit# praudit -l current | grep -i close_range header,90,11,close_range(2),0,Fri Apr 24 02:00:21 2020, + 943 msec,argument,1,0xffffffff,fd,argument,2,0xffffffff,fd,subject,-1,root,0,root,0,1484,0,0,0.0.0.0,return,success,0,trailer,90, ```