diff options
author | rwatson <rwatson@FreeBSD.org> | 2007-04-16 15:37:10 +0000 |
---|---|---|
committer | rwatson <rwatson@FreeBSD.org> | 2007-04-16 15:37:10 +0000 |
commit | 9d9ec51b2c47983a8f8c8d48ed2fca487c2b272a (patch) | |
tree | 103f2ad3fab79dfe5e3b4ca02ebf1d9c1e2e4e82 /contrib/openbsm/etc/audit_event | |
parent | 6b46b736cc84f6697b21608e304026e847ac155d (diff) | |
download | FreeBSD-src-9d9ec51b2c47983a8f8c8d48ed2fca487c2b272a.zip FreeBSD-src-9d9ec51b2c47983a8f8c8d48ed2fca487c2b272a.tar.gz |
Vendor import TrustedBSD OpenBSM 1.0 alpha 14, with the following change
history notes since the last import:
OpenBSM 1.0 alpha 14
- Fix endian issues when processing IPv6 addresses for extended subject
and process tokens.
- gcc41 warnings clean.
- Teach audit_submit(3) about getaudit_addr(2).
- Add support for zonename tokens.
OpenBSM 1.0 alpha 13
- compat/clock_gettime.h now provides a compatibility implementation of
clock_gettime(), which fixes building on Mac OS X.
- Countless man page improvements, markup fixes, content fixs, etc.
- XML printing support via "praudit -x".
- audit.log.5 expanded to include additional BSM token types.
- Added encoding and decoding routines for process64_ex, process32_ex,
subject32_ex, header64, and attr64 tokens.
- Additional audit event identifiers for listen, mlockall/munlockall,
getpath, POSIX message queues, and mandatory access control.
Approved by: re (bmah)
MFC after: 3 weeks
Obtained from: TrustedBSD Project
Diffstat (limited to 'contrib/openbsm/etc/audit_event')
-rw-r--r-- | contrib/openbsm/etc/audit_event | 24 |
1 files changed, 23 insertions, 1 deletions
diff --git a/contrib/openbsm/etc/audit_event b/contrib/openbsm/etc/audit_event index fcc89fc..6290583 100644 --- a/contrib/openbsm/etc/audit_event +++ b/contrib/openbsm/etc/audit_event @@ -1,5 +1,5 @@ # -# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_event#16 $ +# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_event#20 $ # 0:AUE_NULL:indir system call:no 1:AUE_EXIT:exit(2):pc @@ -422,6 +422,28 @@ 43118:AUE_READDIR:readdir(3):no 43119:AUE_IOPL:linux iopl:ad 43120:AUE_VM86:linux vm86:pc +43121:AUE_MAC_GET_PROC:mac_get_proc(2):pc +43122:AUE_MAC_SET_PROC:mac_set_proc(2):pc +43123:AUE_MAC_GET_FD:mac_get_fd(2):fa +43124:AUE_MAC_GET_FILE:mac_get_file(2):fa +43125:AUE_MAC_SET_FD:mac_set_fd(2):fm +43126:AUE_MAC_SET_FILE:mac_set_file(2):fm +43127:AUE_MAC_SYSCALL:mac_syscall(2):ad +43128:AUE_MAC_GET_PID:mac_get_pid(2):pc +43129:AUE_MAC_GET_LINK:mac_get_link(2):fa +43130:AUE_MAC_SET_LINK:mac_set_link(2):fm +43131:AUE_MAC_EXECVE:mac_exeve(2):ex,pc +43132:AUE_GETPATH_FROMFD:getpath_fromfd(2):fa +43133:AUE_GETPATH_FROMADDR:getpath_fromaddr(2):fa +43134:AUE_MQ_OPEN:mq_open(2):ip +43135:AUE_MQ_SETATTR:mq_setattr(2):ip +43136:AUE_MQ_TIMEDRECEIVE:mq_timedreceive(2):ip +43137:AUE_MQ_TIMEDSEND:mq_timedsend(2):ip +43138:AUE_MQ_NOTIFY:mq_notify(2):ip +43139:AUE_MQ_UNLINK:mq_unlink(2):ip +43140:AUE_LISTEN:listen(2):nt +43141:AUE_MLOCKALL:mlockall(2):pc +43142:AUE_MUNLOCKALL:munlockall(2):pc # # User space system events. # |