| audit_kevents.h (185573) | audit_kevents.h (186647) |
|---|---|
| 1/*- 2 * Copyright (c) 2005 Apple Inc. 3 * All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that the following conditions 7 * are met: 8 * --- 12 unchanged lines hidden (view full) --- 21 * DISCLAIMED. IN NO EVENT SHALL APPLE OR ITS CONTRIBUTORS BE LIABLE FOR ANY 22 * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES 23 * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 24 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND 25 * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 26 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 27 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 28 * | 1/*- 2 * Copyright (c) 2005 Apple Inc. 3 * All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that the following conditions 7 * are met: 8 * --- 12 unchanged lines hidden (view full) --- 21 * DISCLAIMED. IN NO EVENT SHALL APPLE OR ITS CONTRIBUTORS BE LIABLE FOR ANY 22 * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES 23 * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 24 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND 25 * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 26 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 27 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 28 * |
| 29 * $P4: //depot/projects/trustedbsd/openbsm/sys/bsm/audit_kevents.h#3 $ | 29 * $P4: //depot/projects/trustedbsd/openbsm/sys/bsm/audit_kevents.h#4 $ |
| 30 */ 31 32#ifndef _BSM_AUDIT_KEVENTS_H_ 33#define _BSM_AUDIT_KEVENTS_H_ 34 35/* 36 * Values marked as AUE_NULL are not required to be audited as per CAPP. 37 * --- 15 unchanged lines hidden (view full) --- 53#define AUE_EXEC 7 54#define AUE_CHDIR 8 55#define AUE_MKNOD 9 56#define AUE_CHMOD 10 57#define AUE_CHOWN 11 58#define AUE_UMOUNT 12 59#define AUE_JUNK 13 /* Solaris-specific. */ 60#define AUE_ACCESS 14 | 30 */ 31 32#ifndef _BSM_AUDIT_KEVENTS_H_ 33#define _BSM_AUDIT_KEVENTS_H_ 34 35/* 36 * Values marked as AUE_NULL are not required to be audited as per CAPP. 37 * --- 15 unchanged lines hidden (view full) --- 53#define AUE_EXEC 7 54#define AUE_CHDIR 8 55#define AUE_MKNOD 9 56#define AUE_CHMOD 10 57#define AUE_CHOWN 11 58#define AUE_UMOUNT 12 59#define AUE_JUNK 13 /* Solaris-specific. */ 60#define AUE_ACCESS 14 |
| 61#define AUE_CHECKUSERACCESS AUE_ACCESS /* Darwin-specific. */ | |
| 62#define AUE_KILL 15 63#define AUE_STAT 16 64#define AUE_LSTAT 17 65#define AUE_ACCT 18 66#define AUE_MCTL 19 /* Solaris-specific. */ 67#define AUE_REBOOT 20 /* XXX: Darwin conflict. */ 68#define AUE_SYMLINK 21 69#define AUE_READLINK 22 --- 485 unchanged lines hidden (view full) --- 555#define AUE_MAC_SET_LCTX 43157 /* Darwin. */ 556#define AUE_MAC_MOUNT 43158 /* Darwin. */ 557#define AUE_GETLCID 43159 /* Darwin. */ 558#define AUE_SETLCID 43160 /* Darwin. */ 559#define AUE_TASKNAMEFORPID 43161 /* Darwin. */ 560#define AUE_ACCESS_EXTENDED 43162 /* Darwin. */ 561#define AUE_CHMOD_EXTENDED 43163 /* Darwin. */ 562#define AUE_FCHMOD_EXTENDED 43164 /* Darwin. */ | 61#define AUE_KILL 15 62#define AUE_STAT 16 63#define AUE_LSTAT 17 64#define AUE_ACCT 18 65#define AUE_MCTL 19 /* Solaris-specific. */ 66#define AUE_REBOOT 20 /* XXX: Darwin conflict. */ 67#define AUE_SYMLINK 21 68#define AUE_READLINK 22 --- 485 unchanged lines hidden (view full) --- 554#define AUE_MAC_SET_LCTX 43157 /* Darwin. */ 555#define AUE_MAC_MOUNT 43158 /* Darwin. */ 556#define AUE_GETLCID 43159 /* Darwin. */ 557#define AUE_SETLCID 43160 /* Darwin. */ 558#define AUE_TASKNAMEFORPID 43161 /* Darwin. */ 559#define AUE_ACCESS_EXTENDED 43162 /* Darwin. */ 560#define AUE_CHMOD_EXTENDED 43163 /* Darwin. */ 561#define AUE_FCHMOD_EXTENDED 43164 /* Darwin. */ |
| 563#define AUE_FSTAT_EXTENDED 43165 /* Dariwn. */ | 562#define AUE_FSTAT_EXTENDED 43165 /* Darwin. */ |
| 564#define AUE_LSTAT_EXTENDED 43166 /* Darwin. */ 565#define AUE_MKDIR_EXTENDED 43167 /* Darwin. */ 566#define AUE_MKFIFO_EXTENDED 43168 /* Darwin. */ 567#define AUE_OPEN_EXTENDED 43169 /* Darwin. */ 568#define AUE_OPEN_EXTENDED_R 43170 /* Darwin. */ 569#define AUE_OPEN_EXTENDED_RC 43171 /* Darwin. */ 570#define AUE_OPEN_EXTENDED_RT 43172 /* Darwin. */ 571#define AUE_OPEN_EXTENDED_RTC 43173 /* Darwin. */ --- 8 unchanged lines hidden (view full) --- 580#define AUE_STAT_EXTENDED 43182 /* Darwin. */ 581#define AUE_UMASK_EXTENDED 43183 /* Darwin. */ 582#define AUE_OPENAT 43184 /* FreeBSD. */ 583#define AUE_POSIX_OPENPT 43185 /* FreeBSD. */ 584#define AUE_CAP_NEW 43186 /* TrustedBSD. */ 585#define AUE_CAP_GETRIGHTS 43187 /* TrustedBSD. */ 586#define AUE_CAP_ENTER 43188 /* TrustedBSD. */ 587#define AUE_CAP_GETMODE 43189 /* TrustedBSD. */ | 563#define AUE_LSTAT_EXTENDED 43166 /* Darwin. */ 564#define AUE_MKDIR_EXTENDED 43167 /* Darwin. */ 565#define AUE_MKFIFO_EXTENDED 43168 /* Darwin. */ 566#define AUE_OPEN_EXTENDED 43169 /* Darwin. */ 567#define AUE_OPEN_EXTENDED_R 43170 /* Darwin. */ 568#define AUE_OPEN_EXTENDED_RC 43171 /* Darwin. */ 569#define AUE_OPEN_EXTENDED_RT 43172 /* Darwin. */ 570#define AUE_OPEN_EXTENDED_RTC 43173 /* Darwin. */ --- 8 unchanged lines hidden (view full) --- 579#define AUE_STAT_EXTENDED 43182 /* Darwin. */ 580#define AUE_UMASK_EXTENDED 43183 /* Darwin. */ 581#define AUE_OPENAT 43184 /* FreeBSD. */ 582#define AUE_POSIX_OPENPT 43185 /* FreeBSD. */ 583#define AUE_CAP_NEW 43186 /* TrustedBSD. */ 584#define AUE_CAP_GETRIGHTS 43187 /* TrustedBSD. */ 585#define AUE_CAP_ENTER 43188 /* TrustedBSD. */ 586#define AUE_CAP_GETMODE 43189 /* TrustedBSD. */ |
| 587#define AUE_POSIX_SPAWN 43190 /* Darwin. */ 588#define AUE_FSGETPATH 43191 /* Darwin. */ |
|
| 588 589/* 590 * Darwin BSM uses a number of AUE_O_* definitions, which are aliased to the 591 * normal Solaris BSM identifiers. _O_ refers to it being an old, or compat 592 * interface. In most cases, Darwin has never implemented these system calls 593 * but picked up the fields in their system call table from their FreeBSD 594 * import. Happily, these have different names than the AUE_O* definitions 595 * in Solaris BSM. --- 55 unchanged lines hidden (view full) --- 651#define AUE_O_USTATE AUE_NULL /* Darwin */ 652#define AUE_O_WAIT3 AUE_NULL /* Darwin */ 653#define AUE_O_RPAUSE AUE_NULL /* Darwin */ 654#define AUE_O_GETDENTS AUE_NULL /* Darwin */ 655 656/* 657 * Possible desired future values based on review of BSD/Darwin system calls. 658 */ | 589 590/* 591 * Darwin BSM uses a number of AUE_O_* definitions, which are aliased to the 592 * normal Solaris BSM identifiers. _O_ refers to it being an old, or compat 593 * interface. In most cases, Darwin has never implemented these system calls 594 * but picked up the fields in their system call table from their FreeBSD 595 * import. Happily, these have different names than the AUE_O* definitions 596 * in Solaris BSM. --- 55 unchanged lines hidden (view full) --- 652#define AUE_O_USTATE AUE_NULL /* Darwin */ 653#define AUE_O_WAIT3 AUE_NULL /* Darwin */ 654#define AUE_O_RPAUSE AUE_NULL /* Darwin */ 655#define AUE_O_GETDENTS AUE_NULL /* Darwin */ 656 657/* 658 * Possible desired future values based on review of BSD/Darwin system calls. 659 */ |
| 660#define AUE_ACCESSEXTENDED AUE_NULL 661#define AUE_ATGETMSG AUE_NULL 662#define AUE_ATPUTMSG AUE_NULL 663#define AUE_ATSOCKET AUE_NULL 664#define AUE_ATPGETREQ AUE_NULL 665#define AUE_ATPGETRSP AUE_NULL 666#define AUE_ATPSNDREQ AUE_NULL 667#define AUE_ATPSNDRSP AUE_NULL 668#define AUE_BSDTHREADCREATE AUE_NULL 669#define AUE_BSDTHREADTERMINATE AUE_NULL 670#define AUE_BSDTHREADREGISTER AUE_NULL 671#define AUE_CHMODEXTENDED AUE_NULL 672#define AUE_CHUD AUE_NULL 673#define AUE_CSOPS AUE_NULL |
|
| 659#define AUE_DUP AUE_NULL | 674#define AUE_DUP AUE_NULL |
| 675#define AUE_FCHMODEXTENDED AUE_NULL 676#define AUE_FDATASYNC AUE_NULL 677#define AUE_FFSCTL AUE_NULL 678#define AUE_FGETATTRLIST AUE_NULL 679#define AUE_FGETXATTR AUE_NULL 680#define AUE_FLISTXATTR AUE_NULL 681#define AUE_FREMOVEXATTR AUE_NULL |
|
| 660#define AUE_FSCTL AUE_NULL | 682#define AUE_FSCTL AUE_NULL |
| 683#define AUE_FSETATTRLIST AUE_NULL 684#define AUE_FSETXATTR AUE_NULL 685#define AUE_FSTATEXTENDED AUE_NULL 686#define AUE_FSTATFS64 AUE_NULL |
|
| 661#define AUE_FSTATV AUE_NULL | 687#define AUE_FSTATV AUE_NULL |
| 688#define AUE_FSTAT64 AUE_NULL 689#define AUE_FSTAT64EXTENDED AUE_NULL |
|
| 662#define AUE_GCCONTROL AUE_NULL | 690#define AUE_GCCONTROL AUE_NULL |
| 691#define AUE_GETDIRENTRIES64 AUE_NULL |
|
| 663#define AUE_GETDTABLESIZE AUE_NULL 664#define AUE_GETEGID AUE_NULL 665#define AUE_GETEUID AUE_NULL | 692#define AUE_GETDTABLESIZE AUE_NULL 693#define AUE_GETEGID AUE_NULL 694#define AUE_GETEUID AUE_NULL |
| 695#define AUE_GETFSSTAT64 AUE_NULL |
|
| 666#define AUE_GETGID AUE_NULL 667#define AUE_GETGROUPS AUE_NULL 668#define AUE_GETITIMER AUE_NULL 669#define AUE_GETLOGIN AUE_NULL 670#define AUE_GETPEERNAME AUE_NULL 671#define AUE_GETPGID AUE_NULL 672#define AUE_GETPGRP AUE_NULL 673#define AUE_GETPID AUE_NULL 674#define AUE_GETPPID AUE_NULL 675#define AUE_GETPRIORITY AUE_NULL 676#define AUE_GETRLIMIT AUE_NULL 677#define AUE_GETRUSAGE AUE_NULL | 696#define AUE_GETGID AUE_NULL 697#define AUE_GETGROUPS AUE_NULL 698#define AUE_GETITIMER AUE_NULL 699#define AUE_GETLOGIN AUE_NULL 700#define AUE_GETPEERNAME AUE_NULL 701#define AUE_GETPGID AUE_NULL 702#define AUE_GETPGRP AUE_NULL 703#define AUE_GETPID AUE_NULL 704#define AUE_GETPPID AUE_NULL 705#define AUE_GETPRIORITY AUE_NULL 706#define AUE_GETRLIMIT AUE_NULL 707#define AUE_GETRUSAGE AUE_NULL |
| 708#define AUE_GETSGROUPS AUE_NULL |
|
| 678#define AUE_GETSID AUE_NULL 679#define AUE_GETSOCKNAME AUE_NULL 680#define AUE_GETTIMEOFDAY AUE_NULL | 709#define AUE_GETSID AUE_NULL 710#define AUE_GETSOCKNAME AUE_NULL 711#define AUE_GETTIMEOFDAY AUE_NULL |
| 712#define AUE_GETTID AUE_NULL |
|
| 681#define AUE_GETUID AUE_NULL 682#define AUE_GETSOCKOPT AUE_NULL | 713#define AUE_GETUID AUE_NULL 714#define AUE_GETSOCKOPT AUE_NULL |
| 683#define AUE_GTSOCKOPT AUE_GETSOCKOPT /* XXX: Typo in Darwin. */ | 715#define AUE_GETWGROUPS AUE_NULL 716#define AUE_GETXATTR AUE_NULL 717#define AUE_IDENTITYSVC AUE_NULL 718#define AUE_INITGROUPS AUE_NULL 719#define AUE_IOPOLICYSYS AUE_NULL |
| 684#define AUE_ISSETUGID AUE_NULL | 720#define AUE_ISSETUGID AUE_NULL |
| 721#define AUE_LIOLISTIO AUE_NULL 722#define AUE_LISTXATTR AUE_NULL 723#define AUE_LSTATEXTENDED AUE_NULL |
|
| 685#define AUE_LSTATV AUE_NULL | 724#define AUE_LSTATV AUE_NULL |
| 725#define AUE_LSTAT64 AUE_NULL 726#define AUE_LSTAT64EXTENDED AUE_NULL |
|
| 686#define AUE_MADVISE AUE_NULL 687#define AUE_MINCORE AUE_NULL 688#define AUE_MKCOMPLEX AUE_NULL | 727#define AUE_MADVISE AUE_NULL 728#define AUE_MINCORE AUE_NULL 729#define AUE_MKCOMPLEX AUE_NULL |
| 730#define AUE_MKDIREXTENDED AUE_NULL 731#define AUE_MKFIFOEXTENDED AUE_NULL |
|
| 689#define AUE_MODWATCH AUE_NULL 690#define AUE_MSGCL AUE_NULL 691#define AUE_MSYNC AUE_NULL | 732#define AUE_MODWATCH AUE_NULL 733#define AUE_MSGCL AUE_NULL 734#define AUE_MSYNC AUE_NULL |
| 735#define AUE_OPENEXTENDED AUE_NULL |
|
| 692#define AUE_PREAD AUE_NULL 693#define AUE_PWRITE AUE_NULL 694#define AUE_PREADV AUE_NULL | 736#define AUE_PREAD AUE_NULL 737#define AUE_PWRITE AUE_NULL 738#define AUE_PREADV AUE_NULL |
| 739#define AUE_PROCINFO AUE_NULL 740#define AUE_PTHREADCANCELED AUE_NULL 741#define AUE_PTHREADCHDIR AUE_NULL 742#define AUE_PTHREADCONDBROADCAST AUE_NULL 743#define AUE_PTHREADCONDDESTORY AUE_NULL 744#define AUE_PTHREADCONDINIT AUE_NULL 745#define AUE_PTHREADCONDSIGNAL AUE_NULL 746#define AUE_PTHREADCONDWAIT AUE_NULL 747#define AUE_PTHREADFCHDIR AUE_NULL 748#define AUE_PTHREADMARK AUE_NULL 749#define AUE_PTHREADMUTEXDESTROY AUE_NULL 750#define AUE_PTHREADMUTEXINIT AUE_NULL 751#define AUE_PTHREADMUTEXTRYLOCK AUE_NULL 752#define AUE_PTHREADMUTEXUNLOCK AUE_NULL |
|
| 695#define AUE_PWRITEV AUE_NULL | 753#define AUE_PWRITEV AUE_NULL |
| 754#define AUE_REMOVEXATTR AUE_NULL |
|
| 696#define AUE_SBRK AUE_NULL 697#define AUE_SELECT AUE_NULL 698#define AUE_SEMDESTROY AUE_NULL 699#define AUE_SEMGETVALUE AUE_NULL 700#define AUE_SEMINIT AUE_NULL 701#define AUE_SEMPOST AUE_NULL 702#define AUE_SEMTRYWAIT AUE_NULL 703#define AUE_SEMWAIT AUE_NULL | 755#define AUE_SBRK AUE_NULL 756#define AUE_SELECT AUE_NULL 757#define AUE_SEMDESTROY AUE_NULL 758#define AUE_SEMGETVALUE AUE_NULL 759#define AUE_SEMINIT AUE_NULL 760#define AUE_SEMPOST AUE_NULL 761#define AUE_SEMTRYWAIT AUE_NULL 762#define AUE_SEMWAIT AUE_NULL |
| 763#define AUE_SEMWAITSIGNAL AUE_NULL |
|
| 704#define AUE_SETITIMER AUE_NULL | 764#define AUE_SETITIMER AUE_NULL |
| 765#define AUE_SETSGROUPS AUE_NULL 766#define AUE_SETTID AUE_NULL 767#define AUE_SETTIDWITHPID AUE_NULL 768#define AUE_SETWGROUPS AUE_NULL 769#define AUE_SETXATTR AUE_NULL 770#define AUE_SHAREDREGIONCHECK AUE_NULL 771#define AUE_SHAREDREGIONMAP AUE_NULL |
|
| 705#define AUE_SIGACTION AUE_NULL 706#define AUE_SIGALTSTACK AUE_NULL 707#define AUE_SIGPENDING AUE_NULL 708#define AUE_SIGPROCMASK AUE_NULL 709#define AUE_SIGRETURN AUE_NULL 710#define AUE_SIGSUSPEND AUE_NULL 711#define AUE_SIGWAIT AUE_NULL 712#define AUE_SSTK AUE_NULL | 772#define AUE_SIGACTION AUE_NULL 773#define AUE_SIGALTSTACK AUE_NULL 774#define AUE_SIGPENDING AUE_NULL 775#define AUE_SIGPROCMASK AUE_NULL 776#define AUE_SIGRETURN AUE_NULL 777#define AUE_SIGSUSPEND AUE_NULL 778#define AUE_SIGWAIT AUE_NULL 779#define AUE_SSTK AUE_NULL |
| 780#define AUE_STACKSNAPSHOT AUE_NULL 781#define AUE_STATEXTENDED AUE_NULL 782#define AUE_STATFS64 AUE_NULL |
|
| 713#define AUE_STATV AUE_NULL | 783#define AUE_STATV AUE_NULL |
| 784#define AUE_STAT64 AUE_NULL 785#define AUE_STAT64EXTENDED AUE_NULL |
|
| 714#define AUE_SYNC AUE_NULL 715#define AUE_SYSCALL AUE_NULL 716#define AUE_TABLE AUE_NULL | 786#define AUE_SYNC AUE_NULL 787#define AUE_SYSCALL AUE_NULL 788#define AUE_TABLE AUE_NULL |
| 789#define AUE_UMASKEXTENDED AUE_NULL 790#define AUE_VMPRESSUREMONITOR AUE_NULL |
|
| 717#define AUE_WAITEVENT AUE_NULL | 791#define AUE_WAITEVENT AUE_NULL |
| 792#define AUE_WAITID AUE_NULL |
|
| 718#define AUE_WATCHEVENT AUE_NULL | 793#define AUE_WATCHEVENT AUE_NULL |
| 794#define AUE_WORKQOPEN AUE_NULL 795#define AUE_WORKQOPS AUE_NULL |
|
| 719 720#endif /* !_BSM_AUDIT_KEVENTS_H_ */ | 796 797#endif /* !_BSM_AUDIT_KEVENTS_H_ */ |