upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-06-09 00:32:25 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

In r358471, we interrupted the case block that would eventually lead

Browse source 
to the path related tokens not being processed. Restore this behavior and
and move AUE_JAIL_SET in this block, as it may conditionally contain a
path token.

Discovered by:	kevans
PR:	244537
Reviewed by:	kevans
Differential Revision:	https://reviews.freebsd.org/D23929
This commit is contained in:
Christian S.J. Peron 2020-03-03 01:46:35 +00:00
parent 4cf919edb9
commit 3580f3cfec
1 changed files with 14 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

27
sys/security/audit/audit_bsm.c
View file

@ -803,25 +803,26 @@ kaudit_to_bsm(struct kaudit_record *kar, struct au_record **pau)
UPATH1_VNODE1_TOKENS;
break;
/*
* NB: We may want to verify that the appropriate
* audit args are being processed here, but I think
* a bit analysis is required.
*
* Process AUE_JAIL_SET in the next block so we can pickup any path
* related tokens that might exist.
*/
case AUE_JAIL_GET:
case AUE_JAIL_ATTACH:
case AUE_JAIL_REMOVE:
break;
case AUE_JAIL_SET:
case AUE_CHDIR:
case AUE_CHROOT:
case AUE_FSTATAT:
case AUE_FUTIMESAT:
case AUE_GETATTRLIST:
case AUE_JAIL:
break;
/*
* NB: We may want to verify that the appropriate
* audit args are being processed here, but I think
* a bit analysis is required.
*/
case AUE_JAIL_GET:
case AUE_JAIL_SET:
case AUE_JAIL_ATTACH:
case AUE_JAIL_REMOVE:
break;
case AUE_LUTIMES:
case AUE_NFS_GETFH:
case AUE_LGETFH: