X-Git-Url: https://git.saurik.com/apple/xnu.git/blobdiff_plain/fe8ab488e9161c46dd9885d58fc52996dc0249ff..eee3565979933af707c711411001ba11fe406a3c:/bsd/security/audit/audit_bsm.c?ds=sidebyside

diff --git a/bsd/security/audit/audit_bsm.c b/bsd/security/audit/audit_bsm.c
index d63c131ea..da938d8a1 100644
--- a/bsd/security/audit/audit_bsm.c
+++ b/bsd/security/audit/audit_bsm.c
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 1999-2009 Apple Inc.
+ * Copyright (c) 1999-2016 Apple Inc.
  * All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
@@ -1419,6 +1419,36 @@ kaudit_to_bsm(struct kaudit_record *kar, struct au_record **pau)
 		UPATH1_VNODE1_TOKENS;
 		break;
 
+	case AUE_CLONEFILEAT:
+		if (ARG_IS_VALID(kar, ARG_FD)) {
+			tok = au_to_arg32(1, "src dir fd", ar->ar_arg_fd);
+			kau_write(rec, tok);
+		}
+		UPATH1_VNODE1_TOKENS;
+		if (ARG_IS_VALID(kar, ARG_FD2)) {
+			tok = au_to_arg32(1, "dst dir fd", ar->ar_arg_fd2);
+			kau_write(rec, tok);
+		}
+		UPATH2_TOKENS;
+		if (ARG_IS_VALID(kar, ARG_VALUE32)) {
+			tok = au_to_arg32(1, "flags", ar->ar_arg_value32);
+			kau_write(rec, tok);
+		}
+		break;
+
+	case AUE_FCLONEFILEAT:
+		FD_VNODE1_TOKENS;
+		if (ARG_IS_VALID(kar, ARG_FD2)) {
+			tok = au_to_arg32(1, "dst dir fd", ar->ar_arg_fd2);
+			kau_write(rec, tok);
+		}
+		UPATH2_TOKENS;
+		if (ARG_IS_VALID(kar, ARG_VALUE32)) {
+			tok = au_to_arg32(1, "flags", ar->ar_arg_value32);
+			kau_write(rec, tok);
+		}
+		break;
+
 	case AUE_PTRACE:
 		if (ARG_IS_VALID(kar, ARG_CMD)) {
 			tok = au_to_arg32(1, "request", ar->ar_arg_cmd);
@@ -1911,8 +1941,6 @@ kaudit_to_bsm(struct kaudit_record *kar, struct au_record **pau)
 
 	case AUE_MAC_GET_PROC:
 	case AUE_MAC_SET_PROC:
-	case AUE_MAC_GET_LCTX:
-	case AUE_MAC_SET_LCTX:
 		PROCESS_MAC_TOKENS;
 		break;
 #endif