| audit_event (186647) | audit_event (189279) |
|---|---|
| 1# | 1# |
| 2# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_event#34 $ 3# $FreeBSD: head/contrib/openbsm/etc/audit_event 186647 2008-12-31 11:12:24Z rwatson $ | 2# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_event#36 $ 3# $FreeBSD: head/contrib/openbsm/etc/audit_event 189279 2009-03-02 13:29:18Z rwatson $ |
| 4# 5# The mapping between event identifiers and values is also hard-coded in 6# audit_kevents.h and audit_uevents.h, so changes must occur in both places, 7# and programs, such as the kernel, may need to be recompiled to recognize 8# those changes. It is advisable not to change the numbering or naming of 9# kernel audit events. 10# 11# Allocation of BSM event identifier ranges: --- 474 unchanged lines hidden (view full) --- 48643123:AUE_MAC_GET_FD:mac_get_fd(2):fa 48743124:AUE_MAC_GET_FILE:mac_get_file(2):fa 48843125:AUE_MAC_SET_FD:mac_set_fd(2):fm 48943126:AUE_MAC_SET_FILE:mac_set_file(2):fm 49043127:AUE_MAC_SYSCALL:mac_syscall(2):ad 49143128:AUE_MAC_GET_PID:mac_get_pid(2):pc 49243129:AUE_MAC_GET_LINK:mac_get_link(2):fa 49343130:AUE_MAC_SET_LINK:mac_set_link(2):fm | 4# 5# The mapping between event identifiers and values is also hard-coded in 6# audit_kevents.h and audit_uevents.h, so changes must occur in both places, 7# and programs, such as the kernel, may need to be recompiled to recognize 8# those changes. It is advisable not to change the numbering or naming of 9# kernel audit events. 10# 11# Allocation of BSM event identifier ranges: --- 474 unchanged lines hidden (view full) --- 48643123:AUE_MAC_GET_FD:mac_get_fd(2):fa 48743124:AUE_MAC_GET_FILE:mac_get_file(2):fa 48843125:AUE_MAC_SET_FD:mac_set_fd(2):fm 48943126:AUE_MAC_SET_FILE:mac_set_file(2):fm 49043127:AUE_MAC_SYSCALL:mac_syscall(2):ad 49143128:AUE_MAC_GET_PID:mac_get_pid(2):pc 49243129:AUE_MAC_GET_LINK:mac_get_link(2):fa 49343130:AUE_MAC_SET_LINK:mac_set_link(2):fm |
| 49443131:AUE_MAC_EXECVE:mac_exeve(2):ex,pc | 49443131:AUE_MAC_EXECVE:mac_execve(2):ex,pc |
| 49543132:AUE_GETPATH_FROMFD:getpath_fromfd(2):fa 49643133:AUE_GETPATH_FROMADDR:getpath_fromaddr(2):fa 49743134:AUE_MQ_OPEN:mq_open(2):ip 49843135:AUE_MQ_SETATTR:mq_setattr(2):ip 49943136:AUE_MQ_TIMEDRECEIVE:mq_timedreceive(2):ip 50043137:AUE_MQ_TIMEDSEND:mq_timedsend(2):ip 50143138:AUE_MQ_NOTIFY:mq_notify(2):ip 50243139:AUE_MQ_UNLINK:mq_unlink(2):ip --- 44 unchanged lines hidden (view full) --- 54743184:AUE_OPENAT:openat(2) - attr only:fa 54843185:AUE_POSIX_OPENPT:posix_openpt(2):ip 54943186:AUE_CAP_NEW:cap_new(2):fm 55043187:AUE_CAP_GETRIGHTS:cap_getrights(2):fm 55143188:AUE_CAP_ENTER:cap_enter(2):pc 55243189:AUE_CAP_GETMODE:cap_getmode(2):pc 55343190:AUE_POSIX_SPAWN:posix_spawn(2):pc 55443191:AUE_FSGETPATH:fsgetpath(2):ot | 49543132:AUE_GETPATH_FROMFD:getpath_fromfd(2):fa 49643133:AUE_GETPATH_FROMADDR:getpath_fromaddr(2):fa 49743134:AUE_MQ_OPEN:mq_open(2):ip 49843135:AUE_MQ_SETATTR:mq_setattr(2):ip 49943136:AUE_MQ_TIMEDRECEIVE:mq_timedreceive(2):ip 50043137:AUE_MQ_TIMEDSEND:mq_timedsend(2):ip 50143138:AUE_MQ_NOTIFY:mq_notify(2):ip 50243139:AUE_MQ_UNLINK:mq_unlink(2):ip --- 44 unchanged lines hidden (view full) --- 54743184:AUE_OPENAT:openat(2) - attr only:fa 54843185:AUE_POSIX_OPENPT:posix_openpt(2):ip 54943186:AUE_CAP_NEW:cap_new(2):fm 55043187:AUE_CAP_GETRIGHTS:cap_getrights(2):fm 55143188:AUE_CAP_ENTER:cap_enter(2):pc 55243189:AUE_CAP_GETMODE:cap_getmode(2):pc 55343190:AUE_POSIX_SPAWN:posix_spawn(2):pc 55443191:AUE_FSGETPATH:fsgetpath(2):ot |
| 55543192:AUE_PREAD:pread(2):no 55643193:AUE_PWRITE:pwrite(2):no |
|
| 555# 556# Solaris userspace events. 557# 5586144:AUE_at_create:at-create atjob:ad 5596145:AUE_at_delete:at-delete atjob (at or atrm):ad 5606146:AUE_at_perm:at-permission:no 5616147:AUE_cron_invoke:cron-invoke:ad 5626148:AUE_crontab_create:crontab-crontab created:ad --- 94 unchanged lines hidden --- | 557# 558# Solaris userspace events. 559# 5606144:AUE_at_create:at-create atjob:ad 5616145:AUE_at_delete:at-delete atjob (at or atrm):ad 5626146:AUE_at_perm:at-permission:no 5636147:AUE_cron_invoke:cron-invoke:ad 5646148:AUE_crontab_create:crontab-crontab created:ad --- 94 unchanged lines hidden --- |