]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Import kernel audit framework:
authorRobert Watson <rwatson@FreeBSD.org>
Wed, 1 Feb 2006 20:01:18 +0000 (20:01 +0000)
committerRobert Watson <rwatson@FreeBSD.org>
Wed, 1 Feb 2006 20:01:18 +0000 (20:01 +0000)
commit718c8510860cc626f82fd9808cf8224092dd85b8
tree4cdf557824d88e0f2c4a5193059f38fedaeeb2bd
parenta5081e077bd089ceb9ef46ed2467c50ea6f0a1d0
Import kernel audit framework:

- Management of audit state on processes.
- Audit system calls to configure process and system audit state.
- Reliable audit record queue implementation, audit_worker kernel
  thread to asynchronously store records on disk.
- Audit event argument.
- Internal audit data structure -> BSM audit trail conversion library.
- Audit event pre-selection.
- Audit pseudo-device permitting kernel->user upcalls to notify auditd
  of kernel audit events.

Much work by: wsalamon
Obtained from: TrustedBSD Project, Apple Computer, Inc.
sys/security/audit/audit.c [new file with mode: 0644]
sys/security/audit/audit.h [new file with mode: 0644]
sys/security/audit/audit_arg.c [new file with mode: 0644]
sys/security/audit/audit_bsm.c [new file with mode: 0644]
sys/security/audit/audit_bsm_klib.c [new file with mode: 0644]
sys/security/audit/audit_bsm_token.c [new file with mode: 0644]
sys/security/audit/audit_private.h [new file with mode: 0644]
sys/security/audit/audit_syscalls.c [new file with mode: 0644]
sys/security/audit/audit_trigger.c [new file with mode: 0644]