Date: Mon, 17 Oct 2005 13:47:59 GMT From: Robert Watson <rwatson@FreeBSD.org> To: Perforce Change Reviews <perforce@freebsd.org> Subject: PERFORCE change 85435 for review Message-ID: <200510171347.j9HDlx9a066725@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=85435 Change 85435 by rwatson@rwatson_zoo on 2005/10/17 13:47:11 Annotations, comments, and updates for the audit kernel event list and audit_event class entries and mappings. Affected files ... .. //depot/projects/trustedbsd/audit3/contrib/openbsm/bsm/audit_kevents.h#9 integrate .. //depot/projects/trustedbsd/audit3/contrib/openbsm/etc/audit_event#3 integrate Differences ... ==== //depot/projects/trustedbsd/audit3/contrib/openbsm/bsm/audit_kevents.h#9 (text+ko) ==== @@ -177,9 +177,12 @@ #define AUE_SOCKET 183 #define AUE_SENDTO 184 #define AUE_PIPE 185 + /* XXXRW: XXX Solaris socketpair()? */ + /* XXXRW: XXX Solaris send()? */ #define AUE_SENDMSG 188 #define AUE_O_SEND AUE_SENDMSG #define AUE_O_SENDMSG AUE_SENDMSG + /* XXXRW: XXX Solaris recv()? */ #define AUE_RECVMSG 190 #define AUE_O_RECV AUE_RECVMSG #define AUE_O_RECVMSG AUE_RECVMSG @@ -191,11 +194,15 @@ #define AUE_WRITE 195 #define AUE_WRITEV 196 #define AUE_READV 198 -#define AUE_SETUID 200 -#define AUE_STIME 201 -#define AUE_UTIME 202 -#define AUE_NICE 203 -#define AUE_SETGID 205 + /* XXXRW: XXX Solaris old stat()? */ +#define AUE_SETUID 200 /* XXXRW: Solaris old setuid? */ +#define AUE_STIME 201 /* XXXRW: Solaris old stime? */ +#define AUE_UTIME 202 /* XXXRW: Solaris old utime? */ +#define AUE_NICE 203 /* XXXRW: Solaris old nice? */ + /* XXXRW: Solaris old setpgrp? */ +#define AUE_SETGID 205 /* XXXRW: Solaris old setgid? */ + /* XXXRW: Solaris readl? */ + /* XXXRW: Solaris readvl()? */ #define AUE_DUP2 209 #define AUE_MMAP 210 #define AUE_O_MMAP AUE_MMAP @@ -208,6 +215,7 @@ #define AUE_GETMSG 217 #define AUE_PUTPMSG 218 #define AUE_GETPMSG 219 + /* XXXRW: Solaris sc placeholder? */ #define AUE_AUDITON_GETKMASK 221 #define AUE_AUDITON_SETKMASK 222 #define AUE_AUDITON_GETCWD 223 @@ -220,7 +228,7 @@ #define AUE_AUDITON_SETCOND 230 #define AUE_AUDITON_GETCLASS 231 #define AUE_AUDITON_SETCLASS 232 -#define AUE_UTSYS 233 +#define AUE_UTSSYS 233 #define AUE_STATVFS 234 #define AUE_XSTAT 235 #define AUE_LXSTAT 236 @@ -229,6 +237,7 @@ #define AUE_SYSINFO 239 #define AUE_XMKNOD 240 #define AUE_FORK1 241 + /* XXXRW: Solaris modctl()? */ #define AUE_MODLOAD 243 #define AUE_MODUNLOAD 244 #define AUE_MODCONFIG 245 @@ -268,7 +277,7 @@ #define AUE_FLOCK 314 /* XXX: See AUE_SOLARIS_FLOCK. */ #define AUE_MKFIFO 315 #define AUE_POLL 316 -#define AUE_SOCKETPAIR 317 +#define AUE_SOCKETPAIR 317 /* XXXRW: What about 186? */ #define AUE_FUTIMES 318 #define AUE_SETSID 319 #define AUE_SETPRIVEXEC 320 @@ -434,6 +443,5 @@ #define AUE_TABLE AUE_NULL #define AUE_WAITEVENT AUE_NULL #define AUE_WATCHEVENT AUE_NULL -#define AU_WAIT4 AUE_NULL #endif /* !_BSM_AUDIT_KEVENTS_H_ */ ==== //depot/projects/trustedbsd/audit3/contrib/openbsm/etc/audit_event#3 (text+ko) ==== @@ -8,7 +8,7 @@ 7:AUE_EXEC:exec(2):pc,ex 8:AUE_CHDIR:chdir(2):pc 9:AUE_MKNOD:mknod(2):ad -10:AUE_CHMOD:chmod(2):ad +10:AUE_CHMOD:chmod(2):fm 11:AUE_CHOWN:chown(2):fm 12:AUE_UMOUNT:umount(2) - old version:ad 13:AUE_JUNK:junk:no @@ -225,6 +225,8 @@ 262:AUE_P_ONLINE:p_online(2):ad 263:AUE_PROCESSOR_BIND:processor_bind(2):ad 264:AUE_INST_SYNC:inst_sync(2):ad +266:AUE_SETAUDIT_ADDR:setaudit_addr(2):ad +267:AUE_GETAUDIT_ADDR:getaudit_addr(2):ad 301:AUE_GETFSSTAT:getfsstat(2):fa 302:AUE_PTRACE:ptrace(2):pc 303:AUE_CHFLAGS:chflags(2):fm @@ -240,6 +242,7 @@ 313:AUE_SETTIMEOFDAY:settimeofday(2):ad 314:AUE_FLOCK:flock(2):fm 315:AUE_MKFIFO:mkfifo(2):fc +316:AUE_POLL:poll(2):fa 317:AUE_SOCKETPAIR:socketpair(2):nt 318:AUE_FUTIMES:futimes(2):fm 319:AUE_SETSID:setsid(2):pc @@ -276,6 +279,8 @@ 350:AUE_PTHREADKILL:pthread_kill(2):pc 351:AUE_PTHREADSIGMASK:pthread_sigmask(2):pc 352:AUE_AUDITCTL:auditctl(2):ad +353:AUE_RFORK:rfork(2):pc +354:AUE_LCHMOD:lchmod(2):fm 355:AUE_SWAPOFF:swapoff():ad 356:AUE_INITPROCESS:init_process():pc 357:AUE_MAPFD:map_fd():fa @@ -297,6 +302,9 @@ 373:AUE_FHOPEN:fhopen(2):fa 374:AUE_FHSTAT:fhstat(2):fa 375:AUE_JAIL:jail(2):pc +376:AUE_EACCESS:eaccess(2):fa +377:AUE_KQUEUE:kqueue(2):fa +378:AUE_KEVENT:kevent(2):fa 6152:AUE_login:login - local:lo 6153:AUE_logout:logout - local:lo 6159:AUE_su:su(1):lo
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200510171347.j9HDlx9a066725>