/*
- * Copyright (c) 2000-2002 Apple Computer, Inc. All rights reserved.
+ * Copyright (c) 2000-2004 Apple Computer, Inc. All rights reserved.
*
* @APPLE_LICENSE_HEADER_START@
*
- * Copyright (c) 1999-2003 Apple Computer, Inc. All Rights Reserved.
+ * The contents of this file constitute Original Code as defined in and
+ * are subject to the Apple Public Source License Version 1.1 (the
+ * "License"). You may not use this file except in compliance with the
+ * License. Please obtain a copy of the License at
+ * http://www.apple.com/publicsource and read it before using this file.
*
- * This file contains Original Code and/or Modifications of Original Code
- * as defined in and that are subject to the Apple Public Source License
- * Version 2.0 (the 'License'). You may not use this file except in
- * compliance with the License. Please obtain a copy of the License at
- * http://www.opensource.apple.com/apsl/ and read it before using this
- * file.
- *
- * The Original Code and all software distributed under the License are
- * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
+ * This Original Code and all software distributed under the License are
+ * distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY KIND, EITHER
* EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
* INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
- * Please see the License for the specific language governing rights and
- * limitations under the License.
+ * FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT. Please see the
+ * License for the specific language governing rights and limitations
+ * under the License.
*
* @APPLE_LICENSE_HEADER_END@
*/
#include <sys/mount.h>
+#include <bsm/audit_kernel.h>
+
#include <kern/task.h>
#include <kern/thread.h>
#include <mach/machine/thread_status.h>
#define ISSET(t, f) ((t) & (f))
void psignal_lock __P((struct proc *, int, int));
-int isinferior __P((struct proc *, struct proc *));
/*
* sys-trace system call.
unsigned long state_count;
int tr_sigexc = 0;
+ AUDIT_ARG(cmd, uap->req);
+ AUDIT_ARG(pid, uap->pid);
+ AUDIT_ARG(addr, uap->addr);
+ AUDIT_ARG(value, uap->data);
if (uap->req == PT_DENY_ATTACH) {
if (ISSET(p->p_flag, P_TRACED)) {
return (ESRCH);
+ AUDIT_ARG(process, t);
+
/* We do not want ptrace to do anything with kernel, init
* and mach_init
*/