NEX-13644 File access audit logging
Reviewed by: Gordon Ross <gordon.ross@nexenta.com>
Reviewed by: Roman Strashkin <roman.strashkin@nexenta.com>
Reviewed by: Saso Kiselkov <saso.kiselkov@nexenta.com>
Reviewed by: Rick McNeal <rick.mcneal@nexenta.com>
Reviewed by: Yuri Pankov <yuri.pankov@nexenta.com>

*** 19,28 ****
--- 19,30 ----
   * CDDL HEADER END
   */
  /*
   * Copyright 2010 Sun Microsystems, Inc.  All rights reserved.
   * Use is subject to license terms.
+  *
+  * Copyright 2018 Nexenta Systems, Inc.  All rights reserved.
   */
  
  /*
   * Command line option processing for auditreduce.
   * The entry point is process_options(), which is called by main().
*** 67,77 ****
                          { "semowner", OBJ_SEMOWNER  },
                          { "shmid", OBJ_SHM  },
                          { "shmgroup", OBJ_SHMGROUP  },
                          { "shmowner", OBJ_SHMOWNER  },
                          { "sock", OBJ_SOCK },
!                         { "user", OBJ_USER } };
  
  extern int      derive_date(char *, struct tm *);
  extern int      parse_time(char *, int);
  extern char     *re_comp2(char *);
  extern time_t   tm_to_secs(struct tm *);
--- 69,80 ----
                          { "semowner", OBJ_SEMOWNER  },
                          { "shmid", OBJ_SHM  },
                          { "shmgroup", OBJ_SHMGROUP  },
                          { "shmowner", OBJ_SHMOWNER  },
                          { "sock", OBJ_SOCK },
!                         { "user", OBJ_USER },
!                         { "wsid", OBJ_WSID } };
  
  extern int      derive_date(char *, struct tm *);
  extern int      parse_time(char *, int);
  extern char     *re_comp2(char *);
  extern time_t   tm_to_secs(struct tm *);
*** 94,103 ****
--- 97,107 ----
  static int      proc_sid(char *);
  static int      proc_type(char *);
  static int      proc_user(char *, uid_t *);
  static int      proc_zonename(char *);
  static int      proc_fmri(char *);
+ static int      proc_wsid(char *);
  
  /*
   * .func        process_options - process command line options.
   * .desc        Process the user's command line options. These are of two types:
   *      single letter flags that are denoted by '-', and filenames. Some
*** 122,131 ****
--- 126,136 ----
          static char     *options = "ACD:M:NQR:S:VO:"
              "a:b:c:d:e:g:j:l:m:o:r:s:t:u:z:";
  
          error_str = gettext("general error");
  
+         wsid = NULL;
          zonename = NULL;
          /*
           * Big switch to process the flags.
           * Start_over: is for handling the '-' for standard input. Getopt()
           * doesn't recognize it.
*** 408,417 ****
--- 413,424 ----
                  return (proc_user(obj_val, &obj_owner));
          case OBJ_FMRI:
                  return (proc_fmri(obj_val));
          case OBJ_USER:
                  return (proc_user(obj_val, &obj_user));
+         case OBJ_WSID:
+                 return (proc_wsid(obj_val));
          case OBJ_LP: /* lp objects have not yet been defined */
          default: /* impossible */
                  (void) sprintf(errbuf, gettext("invalid object type (%s)"),
                      obj_str);
                  error_str = errbuf;
*** 1290,1294 ****
--- 1297,1322 ----
          if (fmri.sp_arg == NULL)
                  return (-1);
  
          return (0);
  }
+ 
+ /*
+  * proc_wsid - pick up Windows SID.
+  *
+  * ret 0:       non-empty string
+  * ret -1:      empty string or string is too long.
+  */
+ static int
+ proc_wsid(char *optstr)
+ {
+         size_t  length = strlen(optstr);
+         if ((length < 1) || (length > 256) ||
+             strncmp(optstr, "S-1-", 4) != 0) { /* SMB_SID_STRSZ */
+                 (void) snprintf(errbuf, ERRBUF_SZ,
+                     gettext("bad Windows SID: %s"), optstr);
+                 error_str = errbuf;
+                 return (-1);
+         }
+         wsid = strdup(optstr);
+         return (0);
+ }