| audit_uevents.h (185573) | audit_uevents.h (186647) |
|---|---|
| 1/*- | 1/*- |
| 2 * Copyright (c) 2004 Apple Inc. | 2 * Copyright (c) 2004-2008 Apple Inc. |
| 3 * All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that the following conditions 7 * are met: 8 * 1. Redistributions of source code must retain the above copyright 9 * notice, this list of conditions and the following disclaimer. 10 * 2. Redistributions in binary form must reproduce the above copyright --- 10 unchanged lines hidden (view full) --- 21 * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 25 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING 26 * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 27 * POSSIBILITY OF SUCH DAMAGE. 28 * | 3 * All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that the following conditions 7 * are met: 8 * 1. Redistributions of source code must retain the above copyright 9 * notice, this list of conditions and the following disclaimer. 10 * 2. Redistributions in binary form must reproduce the above copyright --- 10 unchanged lines hidden (view full) --- 21 * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 25 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING 26 * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 27 * POSSIBILITY OF SUCH DAMAGE. 28 * |
| 29 * $P4: //depot/projects/trustedbsd/openbsm/bsm/audit_uevents.h#8 $ | 29 * $P4: //depot/projects/trustedbsd/openbsm/bsm/audit_uevents.h#10 $ |
| 30 */ 31 32#ifndef _BSM_AUDIT_UEVENTS_H_ 33#define _BSM_AUDIT_UEVENTS_H_ 34 | 30 */ 31 32#ifndef _BSM_AUDIT_UEVENTS_H_ 33#define _BSM_AUDIT_UEVENTS_H_ 34 |
| 35/*- 36 * User level audit event numbers 37 * 38 * Range of audit event numbers: 39 * 0 Reserved, invalid 40 * 1 - 2047 Reserved for kernel events 41 * 2048 - 32767 Defined by BSM for user events 42 * 32768 - 36864 Reserved for Mac OS-X applications 43 * 36865 - 65535 Reserved for applications 44 * | 35/* 36 * Solaris userspace events. |
| 45 */ 46#define AUE_at_create 6144 47#define AUE_at_delete 6145 48#define AUE_at_perm 6146 49#define AUE_cron_invoke 6147 50#define AUE_crontab_create 6148 51#define AUE_crontab_delete 6149 52#define AUE_crontab_perm 6150 --- 12 unchanged lines hidden (view full) --- 65#define AUE_passwd 6163 66#define AUE_rexd 6164 67#define AUE_ftpd 6165 68#define AUE_init 6166 69#define AUE_uadmin 6167 70#define AUE_shutdown 6168 71#define AUE_poweroff 6169 72#define AUE_crontab_mod 6170 | 37 */ 38#define AUE_at_create 6144 39#define AUE_at_delete 6145 40#define AUE_at_perm 6146 41#define AUE_cron_invoke 6147 42#define AUE_crontab_create 6148 43#define AUE_crontab_delete 6149 44#define AUE_crontab_perm 6150 --- 12 unchanged lines hidden (view full) --- 57#define AUE_passwd 6163 58#define AUE_rexd 6164 59#define AUE_ftpd 6165 60#define AUE_init 6166 61#define AUE_uadmin 6167 62#define AUE_shutdown 6168 63#define AUE_poweroff 6169 64#define AUE_crontab_mod 6170 |
| 73#define AUE_audit_startup 6171 74#define AUE_audit_shutdown 6172 | 65#define AUE_ftpd_logout 6171 66#define AUE_ssh 6172 67#define AUE_role_login 6173 68#define AUE_prof_cmd 6180 69#define AUE_filesystem_add 6181 70#define AUE_filesystem_delete 6182 71#define AUE_filesystem_modify 6183 |
| 75#define AUE_allocate_succ 6200 76#define AUE_allocate_fail 6201 77#define AUE_deallocate_succ 6202 78#define AUE_deallocate_fail 6203 79#define AUE_listdevice_succ 6205 80#define AUE_listdevice_fail 6206 81#define AUE_create_user 6207 82#define AUE_modify_user 6208 83#define AUE_delete_user 6209 84#define AUE_disable_user 6210 85#define AUE_enable_user 6211 | 72#define AUE_allocate_succ 6200 73#define AUE_allocate_fail 6201 74#define AUE_deallocate_succ 6202 75#define AUE_deallocate_fail 6203 76#define AUE_listdevice_succ 6205 77#define AUE_listdevice_fail 6206 78#define AUE_create_user 6207 79#define AUE_modify_user 6208 80#define AUE_delete_user 6209 81#define AUE_disable_user 6210 82#define AUE_enable_user 6211 |
| 86#define AUE_sudo 6300 87#define AUE_modify_password 6501 /* Not assigned by Sun. */ 88#define AUE_create_group 6511 /* Not assigned by Sun. */ 89#define AUE_delete_group 6512 /* Not assigned by Sun. */ 90#define AUE_modify_group 6513 /* Not assigned by Sun. */ 91#define AUE_add_to_group 6514 /* Not assigned by Sun. */ 92#define AUE_remove_from_group 6515 /* Not assigned by Sun. */ 93#define AUE_revoke_obj 6521 /* Not assigned by Sun; not used. */ 94#define AUE_lw_login 6600 /* Not assigned by Sun; tentative. */ 95#define AUE_lw_logout 6601 /* Not assigned by Sun; tentative. */ 96#define AUE_auth_user 7000 /* Not assigned by Sun. */ 97#define AUE_ssconn 7001 /* Not assigned by Sun. */ 98#define AUE_ssauthorize 7002 /* Not assigned by Sun. */ 99#define AUE_ssauthint 7003 /* Not assigned by Sun. */ | 83#define AUE_newgrp_login 6212 84#define AUE_admin_authentication 6213 85#define AUE_kadmind_auth 6214 86#define AUE_kadmind_unauth 6215 87#define AUE_krb5kdc_as_req 6216 88#define AUE_krb5kdc_tgs_req 6217 89#define AUE_krb5kdc_tgs_req_2ndtktmm 6218 90#define AUE_krb5kdc_tgs_req_alt_tgt 6219 91 92/* 93 * Historic Darwin use of the low event numbering space, which collided with 94 * the Solaris event space. Now obsoleted and new, higher, event numbers 95 * assigned to make it easier to interpret Solaris events using the OpenBSM 96 * tools. 97 */ 98#define AUE_DARWIN_audit_startup 6171 99#define AUE_DARWIN_audit_shutdown 6172 100#define AUE_DARWIN_sudo 6300 101#define AUE_DARWIN_modify_password 6501 102#define AUE_DARWIN_create_group 6511 103#define AUE_DARWIN_delete_group 6512 104#define AUE_DARWIN_modify_group 6513 105#define AUE_DARWIN_add_to_group 6514 106#define AUE_DARWIN_remove_from_group 6515 107#define AUE_DARWIN_revoke_obj 6521 108#define AUE_DARWIN_lw_login 6600 109#define AUE_DARWIN_lw_logout 6601 110#define AUE_DARWIN_auth_user 7000 111#define AUE_DARWIN_ssconn 7001 112#define AUE_DARWIN_ssauthorize 7002 113#define AUE_DARWIN_ssauthint 7003 114 115/* 116 * Historic/third-party appliation allocations of event idenfiers. 117 */ |
| 100#define AUE_openssh 32800 101 | 118#define AUE_openssh 32800 119 |
| 120/* 121 * OpenBSM-managed application event space. 122 */ 123#define AUE_audit_startup 45000 /* Darwin-specific. */ 124#define AUE_audit_shutdown 45001 /* Darwin-specific. */ 125#define AUE_modify_password 45014 /* Darwin-specific. */ 126#define AUE_create_group 45015 /* Darwin-specific. */ 127#define AUE_delete_group 45016 /* Darwin-specific. */ 128#define AUE_modify_group 45017 /* Darwin-specific. */ 129#define AUE_add_to_group 45018 /* Darwin-specific. */ 130#define AUE_remove_from_group 45019 /* Darwin-specific. */ 131#define AUE_revoke_obj 45020 /* Darwin-specific. */ 132#define AUE_lw_login 45021 /* Darwin-specific. */ 133#define AUE_lw_logout 45022 /* Darwin-specific. */ 134#define AUE_auth_user 45023 /* Darwin-specific. */ 135#define AUE_ssconn 45024 /* Darwin-specific. */ 136#define AUE_ssauthorize 45025 /* Darwin-specific. */ 137#define AUE_ssauthint 45026 /* Darwin-specific. */ 138#define AUE_calife 45027 /* OpenBSM-allocated. */ 139#define AUE_sudo 45028 /* OpenBSM-allocated. */ 140#define AUE_audit_recovery 45029 /* OpenBSM-allocated. */ 141 |
|
| 102#endif /* !_BSM_AUDIT_UEVENTS_H_ */ | 142#endif /* !_BSM_AUDIT_UEVENTS_H_ */ |