src-test2/sys/security, branch release/6.2.0_cvs

This commit was manufactured by cvs2svn to create tag

2007-01-11T22:54:46Z

'RELENG_6_2_0_RELEASE'. This commit was manufactured to restore the state of the 6.2-RELEASE image.

MFRELENG_6: rev. 1.1.2.5.

2006-11-22T11:51:12Z

Obey the RELENG_6 rules for dealing with Giant for vn_open. Reported by: Steve Wills (steve at stevenwills com) Reviewed by: rwatson Approved by: re (bmah)

MFC revision 1.8

2006-10-16T15:03:48Z

Mark the audit system calls as being un-implemented for jails. Discussed with: rwatson Approved by: re (bmah)

Merge mac_portacl.c:1.9 from HEAD to RELENG_6:

2006-10-15T07:02:26Z

Do allow jailed superuser to override the port ACL. MFC after: 3 days Submitted by: Michal Mertl Approved by: re (bmah)

Merge audit_bsm.c:1.15 from HEAD to RELENG_6:

2006-10-10T13:11:32Z

Add BSM conversion switch entries for a number of system calls, many administrative, to prevent console warnings and enable basic event auditing (generally without arguments). Obtained from: TrustedBSD Project Approved by: re (kensmith)

Update kernel audit implementation for OpenBSM 1.0 alpha 12: use new

2006-09-29T22:45:49Z

trigger name for kernel-generated audit rotation events. Approved by: re (kensmith) Obtained from: TrustedBSD Project

Merge audit_worker.c:1.12 from HEAD to RELENG_6:

2006-09-27T10:08:03Z

Rework the way errors are handled with respect to how audit records are written to the audit trail file: - audit_record_write() now returns void, and all file system specific error handling occurs inside this function. This pushes error handling complexity out of the record demux routine that hands off to both the trail and audit pipes, and makes trail behavior more consistent with pipes as a record destination. - Rate limit kernel printfs associated with running low on space. Rate limit audit triggers for low space. Rate limit printfs for fail stop events. Rate limit audit worker write error printfs. - Document in detail the types of limits and space checks we perform, and combine common cases. This improves the audit subsystems tolerance to low space conditions by avoiding toasting the console with printfs are waking up the audit daemon continuously. Obtained from: TrustedBSD Project Approved by: re (mux)

Merge audit_bsm_token.c:1.8 from HEAD to RELENG_6:

2006-09-23T16:26:02Z

Add missing white space in au_to_exec_{args,env}(). Approved by: re (hrs)

Merge audit_bsm.c:1.14 from HEAD to RELENG_6:

2006-09-22T13:50:58Z

Rather than allocating all buffer memory for the completed BSM record when allocating the record in the first place, allocate the final buffer when closing the BSM record. At that point, more size information is available, so a sufficiently large buffer can be allocated. This allows the kernel to generate audit records in excess of MAXAUDITDATA bytes, but is consistent with Solaris's behavior. This only comes up when auditing command line arguments, in which case we presume the administrator really does want the data as they have specified the policy flag to gather them. Obtained from: TrustedBSD Project Approved by: re (mux)

Merge audit_bsm.c:1.12 from HEAD to RELENG_6:

2006-09-21T11:20:28Z

Add AUE_SYSARCH to the list of audit events during BSM conversion to prevent a console warning. Eventually, we will capture more arguments for sysarch. Obtained from: TrustedBSD Project Approved by: re (mux)