Project

General

Profile

Actions

Bug #11842

closed

Want audit events for auditon(A_SETPMASK) and friends

Added by John Levon about 2 years ago. Updated about 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
-
Start date:
Due date:
% Done:

100%

Estimated time:
Difficulty:
Medium
Tags:
Gerrit CR:

Description

Via Alex Wilson, who also wrote the fix:

There are a number of auditon() calls which let you opt out of auditing at present (e.g. auditon(A_SETPMASK) which lets you opt a different process out of auditing!) which do not produce audit events.

We should produce audit events when these are called.

See https://github.com/joyent/illumos-joyent/issues/195 for Alex's testing notes.

Actions

Also available in: Atom PDF