| audit_event (195740) | audit_event (196031) |
|---|---|
| 1# | 1# |
| 2# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_event#40 $ 3# $FreeBSD: head/contrib/openbsm/etc/audit_event 195740 2009-07-17 14:02:20Z rwatson $ | 2# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_event#41 $ 3# $FreeBSD: head/contrib/openbsm/etc/audit_event 196031 2009-08-02 10:27:54Z rwatson $ |
| 4# 5# The mapping between event identifiers and values is also hard-coded in 6# audit_kevents.h and audit_uevents.h, so changes must occur in both places, 7# and programs, such as the kernel, may need to be recompiled to recognize 8# those changes. It is advisable not to change the numbering or naming of 9# kernel audit events. 10# 11# Allocation of BSM event identifier ranges: --- 255 unchanged lines hidden (view full) --- 267272:AUE_OPENAT_RT:openat(2) - read,trunc:fd,fr,fa,fm 268273:AUE_OPENAT_RTC:openat(2) - read,creat,trunc:fc,fd,fr,fa,fm 269274:AUE_OPENAT_W:openat(2) - write:fw 270275:AUE_OPENAT_WC:openat(2) - write,creat:fc,fw,fa,fm 271276:AUE_OPENAT_WT:openat(2) - write,trunc:fd,fw,fa,fm 272277:AUE_OPENAT_WTC:openat(2) - write,creat,trunc:fc,fd,fw,fa,fm 273278:AUE_OPENAT_RW:openat(2) - read,write:fr,fw 274279:AUE_OPENAT_RWC:openat(2) - read,write,create:fc,fw,fr,fa,fm | 4# 5# The mapping between event identifiers and values is also hard-coded in 6# audit_kevents.h and audit_uevents.h, so changes must occur in both places, 7# and programs, such as the kernel, may need to be recompiled to recognize 8# those changes. It is advisable not to change the numbering or naming of 9# kernel audit events. 10# 11# Allocation of BSM event identifier ranges: --- 255 unchanged lines hidden (view full) --- 267272:AUE_OPENAT_RT:openat(2) - read,trunc:fd,fr,fa,fm 268273:AUE_OPENAT_RTC:openat(2) - read,creat,trunc:fc,fd,fr,fa,fm 269274:AUE_OPENAT_W:openat(2) - write:fw 270275:AUE_OPENAT_WC:openat(2) - write,creat:fc,fw,fa,fm 271276:AUE_OPENAT_WT:openat(2) - write,trunc:fd,fw,fa,fm 272277:AUE_OPENAT_WTC:openat(2) - write,creat,trunc:fc,fd,fw,fa,fm 273278:AUE_OPENAT_RW:openat(2) - read,write:fr,fw 274279:AUE_OPENAT_RWC:openat(2) - read,write,create:fc,fw,fr,fa,fm |
| 275280:AUE_OPENAT_RWTC:openat(2) - read,write,creat,trunc:fc,fd,fw,fr,fa,fm | 275280:AUE_OPENAT_RWT:openat(2) - read,write,trunc:fd,fw,fr,fa,fm 276281:AUE_OPENAT_RWTC:openat(2) - read,write,creat,trunc:fc,fd,fw,fr,fa,fm |
| 276282:AUE_RENAMEAT:renameat(2):fc,fd 277283:AUE_FSTATAT:fstatat(2):fa 278284:AUE_FCHOWNAT:fchownat(2):fm 279285:AUE_FUTIMESAT:futimesat(2):fm 280286:AUE_UNLINKAT:unlinkat(2):fd 281287:AUE_CLOCK_SETTIME:clock_settime(2):ad 282288:AUE_NTP_ADJTIME:ntp_adjtime(2):ad 283289:AUE_SETPPRIV:setppriv(2):pc --- 379 unchanged lines hidden --- | 277282:AUE_RENAMEAT:renameat(2):fc,fd 278283:AUE_FSTATAT:fstatat(2):fa 279284:AUE_FCHOWNAT:fchownat(2):fm 280285:AUE_FUTIMESAT:futimesat(2):fm 281286:AUE_UNLINKAT:unlinkat(2):fd 282287:AUE_CLOCK_SETTIME:clock_settime(2):ad 283288:AUE_NTP_ADJTIME:ntp_adjtime(2):ad 284289:AUE_SETPPRIV:setppriv(2):pc --- 379 unchanged lines hidden --- |