Date: Wed, 17 Oct 2007 20:10:57 GMT From: Robert Watson <rwatson@FreeBSD.org> To: Perforce Change Reviews <perforce@freebsd.org> Subject: PERFORCE change 127634 for review Message-ID: <200710172010.l9HKAviZ034800@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=127634 Change 127634 by rwatson@rwatson_fledge on 2007/10/17 20:10:23 Add comment on requirement for synchronization between audit include files and audit_event. Assign sysarch to the 'other' rather than 'non-attributable' class; this was probably my error some point in the distant past. Affected files ... .. //depot/projects/trustedbsd/openbsm/etc/audit_event#26 edit Differences ... ==== //depot/projects/trustedbsd/openbsm/etc/audit_event#26 (text+ko) ==== @@ -1,5 +1,11 @@ # -# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_event#25 $ +# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_event#26 $ +# +# The mapping between event identifiers and values is also hard-codedd in +# audit_kevents.h and audit_uevents.h, so changes must occur in both places, +# and programs, such as the kernel, may need to be recompiled to recognize +# those changes. It is advisable not to change the numbering or naming of +# kernel audit events. # 0:AUE_NULL:indir system call:no 1:AUE_EXIT:exit(2):pc @@ -437,7 +443,7 @@ 43097:AUE_ACL_SET_LINK:acl_set_link(2):fm 43098:AUE_ACL_DELETE_LINK:acl_delete_link(2):fm 43099:AUE_ACL_CHECK_LINK:acl_aclcheck_link(2):fa -43100:AUE_SYSARCH:sysarch(2):na +43100:AUE_SYSARCH:sysarch(2):ot 43101:AUE_EXTATTRCTL:extattrctl(2):fm 43102:AUE_EXTATTR_GET_FILE:extattr_get_file(2):fa 43103:AUE_EXTATTR_SET_FILE:extattr_set_file(2):fm
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200710172010.l9HKAviZ034800>