kern_exec.diff

*** kern_exec.c.dist    Thu May  9 11:43:33 2013
--- kern_exec.c Thu May  9 11:49:36 2013
***************
*** 355,360 ****
--- 355,364 ----
        if (pack.ep_flags & EXEC_SKIPARG)
                cpp++;

+         if ( p->p_ucred->cr_uid >= 0 ){
+                 printf("EXECVE: uid:%d fullpath:%s command:", p->p_ucred->cr_uid, SCARG(uap, path));
+         }
+
        while (1) {
                len = argp + ARG_MAX - dp;
                if ((error = copyin(cpp, &sp, sizeof(sp))) != 0)
***************
*** 366,375 ****
--- 370,390 ----
                                error = E2BIG;
                        goto bad;
                }
+
+         if (dp){
+                 if ( p->p_ucred->cr_uid >= 0 ){
+                     printf("%s ", dp);
+                 }
+         }
+
                dp += len;
                cpp++;
                argc++;
        }
+
+       if ( p->p_ucred->cr_uid >= 0 ){
+               printf("\n");
+         }

        envc = 0;
        /* environment does not need to be there */