1*ae771770SStanislav Sedov /* 2*ae771770SStanislav Sedov * Copyright (c) 2009 Kungliga Tekniska H�gskolan 3*ae771770SStanislav Sedov * (Royal Institute of Technology, Stockholm, Sweden). 4*ae771770SStanislav Sedov * All rights reserved. 5*ae771770SStanislav Sedov * 6*ae771770SStanislav Sedov * Portions Copyright (c) 2009 Apple Inc. All rights reserved. 7*ae771770SStanislav Sedov * 8*ae771770SStanislav Sedov * Redistribution and use in source and binary forms, with or without 9*ae771770SStanislav Sedov * modification, are permitted provided that the following conditions 10*ae771770SStanislav Sedov * are met: 11*ae771770SStanislav Sedov * 12*ae771770SStanislav Sedov * 1. Redistributions of source code must retain the above copyright 13*ae771770SStanislav Sedov * notice, this list of conditions and the following disclaimer. 14*ae771770SStanislav Sedov * 15*ae771770SStanislav Sedov * 2. Redistributions in binary form must reproduce the above copyright 16*ae771770SStanislav Sedov * notice, this list of conditions and the following disclaimer in the 17*ae771770SStanislav Sedov * documentation and/or other materials provided with the distribution. 18*ae771770SStanislav Sedov * 19*ae771770SStanislav Sedov * 3. Neither the name of the Institute nor the names of its contributors 20*ae771770SStanislav Sedov * may be used to endorse or promote products derived from this software 21*ae771770SStanislav Sedov * without specific prior written permission. 22*ae771770SStanislav Sedov * 23*ae771770SStanislav Sedov * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 24*ae771770SStanislav Sedov * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 25*ae771770SStanislav Sedov * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 26*ae771770SStanislav Sedov * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 27*ae771770SStanislav Sedov * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 28*ae771770SStanislav Sedov * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 29*ae771770SStanislav Sedov * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 30*ae771770SStanislav Sedov * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 31*ae771770SStanislav Sedov * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 32*ae771770SStanislav Sedov * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 33*ae771770SStanislav Sedov * SUCH DAMAGE. 34*ae771770SStanislav Sedov */ 35*ae771770SStanislav Sedov 36*ae771770SStanislav Sedov #include "kcm_locl.h" 37*ae771770SStanislav Sedov 38*ae771770SStanislav Sedov #if 0 39*ae771770SStanislav Sedov #include <bsm/audit_session.h> 40*ae771770SStanislav Sedov #endif 41*ae771770SStanislav Sedov 42*ae771770SStanislav Sedov void 43*ae771770SStanislav Sedov kcm_session_add(pid_t session_id) 44*ae771770SStanislav Sedov { 45*ae771770SStanislav Sedov kcm_log(1, "monitor session: %d\n", session_id); 46*ae771770SStanislav Sedov } 47*ae771770SStanislav Sedov 48*ae771770SStanislav Sedov void 49*ae771770SStanislav Sedov kcm_session_setup_handler(void) 50*ae771770SStanislav Sedov { 51*ae771770SStanislav Sedov #if 0 52*ae771770SStanislav Sedov au_sdev_handle_t *h; 53*ae771770SStanislav Sedov dispatch_queue_t bgq; 54*ae771770SStanislav Sedov 55*ae771770SStanislav Sedov h = au_sdev_open(AU_SDEVF_ALLSESSIONS); 56*ae771770SStanislav Sedov if (h == NULL) 57*ae771770SStanislav Sedov return; 58*ae771770SStanislav Sedov 59*ae771770SStanislav Sedov bgq = dispatch_get_global_queue(DISPATCH_QUEUE_PRIORITY_LOW, 0); 60*ae771770SStanislav Sedov 61*ae771770SStanislav Sedov dispatch_async(bgq, ^{ 62*ae771770SStanislav Sedov for (;;) { 63*ae771770SStanislav Sedov auditinfo_addr_t aio; 64*ae771770SStanislav Sedov int event; 65*ae771770SStanislav Sedov 66*ae771770SStanislav Sedov if (au_sdev_read_aia(h, &event, &aio) != 0) 67*ae771770SStanislav Sedov continue; 68*ae771770SStanislav Sedov 69*ae771770SStanislav Sedov /* 70*ae771770SStanislav Sedov * Ignore everything but END. This should relly be 71*ae771770SStanislav Sedov * CLOSE but since that is delayed until the credential 72*ae771770SStanislav Sedov * is reused, we can't do that 73*ae771770SStanislav Sedov * */ 74*ae771770SStanislav Sedov if (event != AUE_SESSION_END) 75*ae771770SStanislav Sedov continue; 76*ae771770SStanislav Sedov 77*ae771770SStanislav Sedov dispatch_async(dispatch_get_main_queue(), ^{ 78*ae771770SStanislav Sedov kcm_cache_remove_session(aio.ai_asid); 79*ae771770SStanislav Sedov }); 80*ae771770SStanislav Sedov } 81*ae771770SStanislav Sedov }); 82*ae771770SStanislav Sedov #endif 83*ae771770SStanislav Sedov } 84