| audit_event (247602) | audit_event (247667) |
|---|---|
| 1# 2# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_event#43 $ | 1# 2# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_event#43 $ |
| 3# $FreeBSD: head/contrib/openbsm/etc/audit_event 247602 2013-03-02 00:53:12Z pjd $ | 3# $FreeBSD: head/contrib/openbsm/etc/audit_event 247667 2013-03-02 21:11:30Z pjd $ |
| 4# 5# The mapping between event identifiers and values is also hard-coded in 6# audit_kevents.h and audit_uevents.h, so changes must occur in both places, 7# and programs, such as the kernel, may need to be recompiled to recognize 8# those changes. It is advisable not to change the numbering or naming of 9# kernel audit events. 10# 11# Allocation of BSM event identifier ranges: --- 551 unchanged lines hidden (view full) --- 56343199:AUE_PDGETPID:pdgetpid(2):pc 56443200:AUE_PDWAIT:pdwait(2):pc 56543201:AUE_WAIT6:wait6(2):pc 56643202:AUE_CAP_RIGHTS_LIMIT:cap_rights_limit(2):fm 56743203:AUE_CAP_IOCTLS_LIMIT:cap_ioctls_limit(2):fm 56843204:AUE_CAP_IOCTLS_GET:cap_ioctls_get(2):fm 56943205:AUE_CAP_FCNTLS_LIMIT:cap_fcntls_limit(2):fm 57043206:AUE_CAP_FCNTLS_GET:cap_fcntls_get(2):fm | 4# 5# The mapping between event identifiers and values is also hard-coded in 6# audit_kevents.h and audit_uevents.h, so changes must occur in both places, 7# and programs, such as the kernel, may need to be recompiled to recognize 8# those changes. It is advisable not to change the numbering or naming of 9# kernel audit events. 10# 11# Allocation of BSM event identifier ranges: --- 551 unchanged lines hidden (view full) --- 56343199:AUE_PDGETPID:pdgetpid(2):pc 56443200:AUE_PDWAIT:pdwait(2):pc 56543201:AUE_WAIT6:wait6(2):pc 56643202:AUE_CAP_RIGHTS_LIMIT:cap_rights_limit(2):fm 56743203:AUE_CAP_IOCTLS_LIMIT:cap_ioctls_limit(2):fm 56843204:AUE_CAP_IOCTLS_GET:cap_ioctls_get(2):fm 56943205:AUE_CAP_FCNTLS_LIMIT:cap_fcntls_limit(2):fm 57043206:AUE_CAP_FCNTLS_GET:cap_fcntls_get(2):fm |
| 57143207:AUE_BINDAT:bindat(2):nt 57243208:AUE_CONNECTAT:connectat(2):nt |
|
| 571# 572# Solaris userspace events. 573# 5746144:AUE_at_create:at-create atjob:ad 5756145:AUE_at_delete:at-delete atjob (at or atrm):ad 5766146:AUE_at_perm:at-permission:no 5776147:AUE_cron_invoke:cron-invoke:ad 5786148:AUE_crontab_create:crontab-crontab created:ad --- 95 unchanged lines hidden --- | 573# 574# Solaris userspace events. 575# 5766144:AUE_at_create:at-create atjob:ad 5776145:AUE_at_delete:at-delete atjob (at or atrm):ad 5786146:AUE_at_perm:at-permission:no 5796147:AUE_cron_invoke:cron-invoke:ad 5806148:AUE_crontab_create:crontab-crontab created:ad --- 95 unchanged lines hidden --- |