search

cadets / freebsd-old

FreeBSD src tree http://www.FreeBSD.org/
Other
12 stars 7 forks source link

Review more recent system calls for auditing gaps, both event identifiers and arguments #34

Open rwatson opened 8 years ago

rwatson commented 8 years ago

System calls added to recent versions of FreeBSD may not have been thoroughly analysed for either Common Criteria or our DARPA TC-facing requirements for auditing. This issue is to track review of recent system calls to ensure they are properly audited, as well as to fill any gaps and upstream any fixes.

rwatson commented 8 years ago

TODO: merge posix_fallocate(2) auditing.

rwatson commented 8 years ago

TODO: merge aio_mlock(2) auditing TODO: merge procctl(2) auditing

rwatson commented 8 years ago

TODO: merge aio_read(2), aio_write(2), aio_return(2), aio_suspend(2), aio_cancel(2), aio_error(2), aio_waitcomplete(2), aio_fsync(2) auditing.

rwatson commented 8 years ago

Added system-call audit event identifiers for a variety of system calls to OpenBSM:

https://github.com/openbsm/openbsm/commit/7c062ea13ed0560d601465a74d971f407862a3c2

rwatson commented 8 years ago

Added system-call audit event identifier for sctp_generic_sendmsg_iov(2) to OpenBSM:

https://github.com/openbsm/openbsm/commit/439a6fdc910b25da2595680c5cda1ed148066c91