1*ae771770SStanislav Sedov /*
2*ae771770SStanislav Sedov * Copyright (c) 2009 Kungliga Tekniska H�gskolan
3*ae771770SStanislav Sedov * (Royal Institute of Technology, Stockholm, Sweden).
4*ae771770SStanislav Sedov * All rights reserved.
5*ae771770SStanislav Sedov *
6*ae771770SStanislav Sedov * Portions Copyright (c) 2009 Apple Inc. All rights reserved.
7*ae771770SStanislav Sedov *
8*ae771770SStanislav Sedov * Redistribution and use in source and binary forms, with or without
9*ae771770SStanislav Sedov * modification, are permitted provided that the following conditions
10*ae771770SStanislav Sedov * are met:
11*ae771770SStanislav Sedov *
12*ae771770SStanislav Sedov * 1. Redistributions of source code must retain the above copyright
13*ae771770SStanislav Sedov * notice, this list of conditions and the following disclaimer.
14*ae771770SStanislav Sedov *
15*ae771770SStanislav Sedov * 2. Redistributions in binary form must reproduce the above copyright
16*ae771770SStanislav Sedov * notice, this list of conditions and the following disclaimer in the
17*ae771770SStanislav Sedov * documentation and/or other materials provided with the distribution.
18*ae771770SStanislav Sedov *
19*ae771770SStanislav Sedov * 3. Neither the name of the Institute nor the names of its contributors
20*ae771770SStanislav Sedov * may be used to endorse or promote products derived from this software
21*ae771770SStanislav Sedov * without specific prior written permission.
22*ae771770SStanislav Sedov *
23*ae771770SStanislav Sedov * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
24*ae771770SStanislav Sedov * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25*ae771770SStanislav Sedov * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26*ae771770SStanislav Sedov * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
27*ae771770SStanislav Sedov * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28*ae771770SStanislav Sedov * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29*ae771770SStanislav Sedov * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30*ae771770SStanislav Sedov * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31*ae771770SStanislav Sedov * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32*ae771770SStanislav Sedov * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33*ae771770SStanislav Sedov * SUCH DAMAGE.
34*ae771770SStanislav Sedov */
35*ae771770SStanislav Sedov
36*ae771770SStanislav Sedov #include "kcm_locl.h"
37*ae771770SStanislav Sedov
38*ae771770SStanislav Sedov #if 0
39*ae771770SStanislav Sedov #include <bsm/audit_session.h>
40*ae771770SStanislav Sedov #endif
41*ae771770SStanislav Sedov
42*ae771770SStanislav Sedov void
kcm_session_add(pid_t session_id)43*ae771770SStanislav Sedov kcm_session_add(pid_t session_id)
44*ae771770SStanislav Sedov {
45*ae771770SStanislav Sedov kcm_log(1, "monitor session: %d\n", session_id);
46*ae771770SStanislav Sedov }
47*ae771770SStanislav Sedov
48*ae771770SStanislav Sedov void
kcm_session_setup_handler(void)49*ae771770SStanislav Sedov kcm_session_setup_handler(void)
50*ae771770SStanislav Sedov {
51*ae771770SStanislav Sedov #if 0
52*ae771770SStanislav Sedov au_sdev_handle_t *h;
53*ae771770SStanislav Sedov dispatch_queue_t bgq;
54*ae771770SStanislav Sedov
55*ae771770SStanislav Sedov h = au_sdev_open(AU_SDEVF_ALLSESSIONS);
56*ae771770SStanislav Sedov if (h == NULL)
57*ae771770SStanislav Sedov return;
58*ae771770SStanislav Sedov
59*ae771770SStanislav Sedov bgq = dispatch_get_global_queue(DISPATCH_QUEUE_PRIORITY_LOW, 0);
60*ae771770SStanislav Sedov
61*ae771770SStanislav Sedov dispatch_async(bgq, ^{
62*ae771770SStanislav Sedov for (;;) {
63*ae771770SStanislav Sedov auditinfo_addr_t aio;
64*ae771770SStanislav Sedov int event;
65*ae771770SStanislav Sedov
66*ae771770SStanislav Sedov if (au_sdev_read_aia(h, &event, &aio) != 0)
67*ae771770SStanislav Sedov continue;
68*ae771770SStanislav Sedov
69*ae771770SStanislav Sedov /*
70*ae771770SStanislav Sedov * Ignore everything but END. This should relly be
71*ae771770SStanislav Sedov * CLOSE but since that is delayed until the credential
72*ae771770SStanislav Sedov * is reused, we can't do that
73*ae771770SStanislav Sedov * */
74*ae771770SStanislav Sedov if (event != AUE_SESSION_END)
75*ae771770SStanislav Sedov continue;
76*ae771770SStanislav Sedov
77*ae771770SStanislav Sedov dispatch_async(dispatch_get_main_queue(), ^{
78*ae771770SStanislav Sedov kcm_cache_remove_session(aio.ai_asid);
79*ae771770SStanislav Sedov });
80*ae771770SStanislav Sedov }
81*ae771770SStanislav Sedov });
82*ae771770SStanislav Sedov #endif
83*ae771770SStanislav Sedov }
84