usr/src/lib/libbsm/audit_event.txt
changeset 1676 37f4a3e2bd99
parent 898 64b2a371a6bd
child 2246 f69155f53d36
equal deleted inserted replaced
1675:5791e75682d0 1676:37f4a3e2bd99
     1 #
     1 #
     2 # Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
     2 # Copyright 2006 Sun Microsystems, Inc.  All rights reserved.
     3 # Use is subject to license terms.
     3 # Use is subject to license terms.
     4 #
     4 #
       
     5 #
     5 # CDDL HEADER START
     6 # CDDL HEADER START
     6 #
     7 #
     7 # The contents of this file are subject to the terms of the
     8 # The contents of this file are subject to the terms of the
     8 # Common Development and Distribution License, Version 1.0 only
     9 # Common Development and Distribution License (the "License").
     9 # (the "License").  You may not use this file except in compliance
    10 # You may not use this file except in compliance with the License.
    10 # with the License.
       
    11 #
    11 #
    12 # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
    12 # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
    13 # or http://www.opensolaris.org/os/licensing.
    13 # or http://www.opensolaris.org/os/licensing.
    14 # See the License for the specific language governing permissions
    14 # See the License for the specific language governing permissions
    15 # and limitations under the License.
    15 # and limitations under the License.
    46 #     0		Reserved as an invalid event number.
    46 #     0		Reserved as an invalid event number.
    47 #     1 - 2047	Reserved for the Solaris Kernel events.
    47 #     1 - 2047	Reserved for the Solaris Kernel events.
    48 #  2048 - 32767	Reserved for the Solaris TCB programs.
    48 #  2048 - 32767	Reserved for the Solaris TCB programs.
    49 # 32768 - 65535	Available for third party TCB applications.
    49 # 32768 - 65535	Available for third party TCB applications.
    50 #
    50 #
    51 # 6144 - 32767  SunOS 5.X user level audit events
    51 #
       
    52 # Allocation of reserved kernel events:
       
    53 # (NOTE: the kernel event table, and possibly MAX_KEVENTS, must be updated
       
    54 # in audit_kevents.h when changes are made to kernel events.)
       
    55 #	    1 -   511	allocated for Solaris
       
    56 #	  512 -  1023	allocated for Trusted Solaris/Trusted Extensions
       
    57 #	 1024 -  2047	(reserved but not allocated)
       
    58 #
       
    59 # Allocation of user level audit events:
       
    60 #	 2048 -  5999	(reserved but not allocated)
       
    61 #	 6000 -  7999	allocated for Solaris
       
    62 #	 8000 -  8999	(reserved but not allocated)
       
    63 #	 9000 -  9999	allocated for Trusted Solaris/Trusted Extensions
       
    64 #	10000 - 32767	(reserved but not allocated)
       
    65 #	32768 - 65535	(Available for third party TCB applications)
    52 #
    66 #
    53 #
    67 #
    54 # kernel audit events
    68 # kernel audit events
       
    69 #	    1 -   511	allocated for Solaris
    55 #
    70 #
    56 0:AUE_NULL:indir system call:no
    71 0:AUE_NULL:indir system call:no
    57 1:AUE_EXIT:exit(2):ps
    72 1:AUE_EXIT:exit(2):ps
    58 2:AUE_FORK:fork(2):ps
    73 2:AUE_FORK:fork(2):ps
    59 # AUE_OPEN is a placeholder and will not be generated
    74 # AUE_OPEN is a placeholder and will not be generated
   171 111:AUE_CORE:process dumped core:fc
   186 111:AUE_CORE:process dumped core:fc
   172 112:AUE_CLOSE:close(2):cl
   187 112:AUE_CLOSE:close(2):cl
   173 113:AUE_SYSTEMBOOT:system booted:na
   188 113:AUE_SYSTEMBOOT:system booted:na
   174 114:AUE_ASYNC_DAEMON_EXIT:async_daemon(2) exited:no
   189 114:AUE_ASYNC_DAEMON_EXIT:async_daemon(2) exited:no
   175 115:AUE_NFSSVC_EXIT:nfssvc(2) exited:no
   190 115:AUE_NFSSVC_EXIT:nfssvc(2) exited:no
   176 128:AUE_WRITEL:writel(2):no
       
   177 129:AUE_WRITEVL:writevl(2):no
       
   178 130:AUE_GETAUID:getauid(2):aa
   191 130:AUE_GETAUID:getauid(2):aa
   179 131:AUE_SETAUID:setauid(2):aa
   192 131:AUE_SETAUID:setauid(2):aa
   180 132:AUE_GETAUDIT:getaudit(2):aa
   193 132:AUE_GETAUDIT:getaudit(2):aa
   181 133:AUE_SETAUDIT:setaudit(2):aa
   194 133:AUE_SETAUDIT:setaudit(2):aa
   182 134:AUE_GETUSERAUDIT:getuseraudit(2):no
   195 134:AUE_GETUSERAUDIT:getuseraudit(2):no
   326 290:AUE_MODDEVPLCY:modctl(2) - configure device policy:as
   339 290:AUE_MODDEVPLCY:modctl(2) - configure device policy:as
   327 291:AUE_MODADDPRIV:modctl(2) - configure additional privilege:as
   340 291:AUE_MODADDPRIV:modctl(2) - configure additional privilege:as
   328 292:AUE_CRYPTOADM:kernel cryptographic framework:as
   341 292:AUE_CRYPTOADM:kernel cryptographic framework:as
   329 293:AUE_CONFIGSSL:configure kernel SSL:as
   342 293:AUE_CONFIGSSL:configure kernel SSL:as
   330 #
   343 #
       
   344 # Trusted Solaris/Trusted Extensions kernel audit events
       
   345 #	  512 -  1023	allocated for Trusted Solaris/Trusted Extensions
       
   346 #
       
   347 #
   331 # user level audit events
   348 # user level audit events
       
   349 #	6000 -  7999	allocated for Solaris
   332 #
   350 #
   333 # 2048 - 6143	Reserved
   351 # 2048 - 6143	Reserved
   334 #
   352 #
   335 6144:AUE_at_create:at-create atjob:ua
   353 6144:AUE_at_create:at-create atjob:ua
   336 6145:AUE_at_delete:at-delete atjob (at or atrm):ua
   354 6145:AUE_at_delete:at-delete atjob (at or atrm):ua
   407 6223:AUE_zone_state:zoneadmd:ss
   425 6223:AUE_zone_state:zoneadmd:ss
   408 6224:AUE_inetd_copylimit:inetd copylimit:na
   426 6224:AUE_inetd_copylimit:inetd copylimit:na
   409 6225:AUE_inetd_failrate:inetd failrate:na
   427 6225:AUE_inetd_failrate:inetd failrate:na
   410 6226:AUE_inetd_ratelimit:inetd ratelimit:na
   428 6226:AUE_inetd_ratelimit:inetd ratelimit:na
   411 6227:AUE_zlogin:login - zlogin:lo
   429 6227:AUE_zlogin:login - zlogin:lo
       
   430 #
       
   431 # Trusted Solaris/Trusted Extensions user level audit events
       
   432 #	9000 -  9999	allocated for Trusted Solaris/Trusted Extensions
       
   433 #
       
   434 9035:AUE_sl_change:Workspace label change:ap
       
   435 9037:AUE_file_copy:file copy:fm
       
   436 9038:AUE_file_move:file move:fm
       
   437 9039:AUE_sel_mgr_xfer:selection manager transfer:fm
       
   438 9101:AUE_ClientConnect:client connection to x server:lo
       
   439 9102:AUE_ClientDisconnect:client disconn. from x server:lo
       
   440 9120:AUE_ChangeProperty:XChangeProperty(3X11):xc
       
   441 9121:AUE_DeleteProperty:XDeleteProperty(3X11):xc
       
   442 9137:AUE_GrabServer:XGrabServer(3X11):ot
       
   443 9138:AUE_UngrabServer:XUngrabServer(3X11):ot
       
   444 9146:AUE_SetFontPath:XSetFontPath(3X11):ot
       
   445 9173:AUE_InstallColormap:XInstallColormap(3X11):ot
       
   446 9174:AUE_UninstallColormap:XUninstallColormap(3X11):xp
       
   447 9193:AUE_SetScreenSaver:XSetScreenSaver(3X11):xp
       
   448 9194:AUE_ChangeHosts:XChangeHosts(3X11):ot
       
   449 9195:AUE_SetAccessControl:XSetAccessControl(3X11):xp
       
   450 9196:AUE_SetCloseDownMode:XSetCloseDownMode(3X11):xs
       
   451 9197:AUE_KillClient:XKillClient(3X11):xc
       
   452 9202:AUE_XExtensions:X server extensions:xp
       
   453 9103:AUE_CreateWindow:XCreateWindow(3X11):xc
       
   454 9104:AUE_ChangeWindowAttributes:XChangeWindowAttributes(3X11):xp
       
   455 9105:AUE_GetWindowAttributes:XGetWindowAttributes(3X11):xp
       
   456 9106:AUE_DestroyWindow:XDestroyWindow(3X11):xc
       
   457 9107:AUE_DestroySubwindows:XDestroySubwindows(3X11):xc
       
   458 9108:AUE_ChangeSaveSet:XChangeSaveSet(3X11):xp
       
   459 9109:AUE_ReparentWindow:XReparentWindow(3X11):xp
       
   460 9110:AUE_MapWindow:XMapWindow(3X11):xp
       
   461 9111:AUE_MapSubwindows:XMapSubwindows(3X11):xp
       
   462 9112:AUE_UnmapWindow:XUnmapWindow(3X11):xp
       
   463 9113:AUE_UnmapSubwindows:XUnmapSubwindows(3X11):xp
       
   464 9114:AUE_ConfigureWindow:XConfigureWindow(3X11):xp
       
   465 9115:AUE_CirculateWindow:XCirculateWindow(3X11):xp
       
   466 9116:AUE_GetGeometry:XGetGeometry(3X11):xp
       
   467 9117:AUE_QueryTree:XQueryTree(3X11):xp
       
   468 9118:AUE_InternAtom:XInternAtom(3X11):xs
       
   469 9119:AUE_GetAtomName:XGetAtomName(3X11):xs
       
   470 9122:AUE_GetProperty:XGetProperty(3X11):xp
       
   471 9123:AUE_ListProperties:XListProperties(3X11):xp
       
   472 9124:AUE_SetSelectionOwner:XSetSelectionOwner(3X11):xp
       
   473 9125:AUE_GetSelectionOwner:XGetSelectionOwner(3X11):xs
       
   474 9126:AUE_ConvertSelection:XConvertSelection(3X11):xs
       
   475 9127:AUE_SendEvent:XSendEvent(3X11):xs
       
   476 9128:AUE_GrabPointer:XGrabPointer(3X11):xs
       
   477 9129:AUE_UngrabPointer:XUngrabPointer(3X11):xs
       
   478 9130:AUE_GrabButton:XGrabButton(3X11):xp
       
   479 9131:AUE_UngrabButton:XUngrabButton(3X11):xs
       
   480 9132:AUE_ChangeActivePointerGrab:XChangeActivePointerGrab(3X11):xs
       
   481 9133:AUE_GrabKeyboard:XGrabKeyboard(3X11):xp
       
   482 9134:AUE_UngrabKeyboard:XUngrabKeyboard(3X11):xs
       
   483 9135:AUE_GrabKey:XGrabKey(3X11):xp
       
   484 9136:AUE_UngrabKey:XUngrabKey(3X11):xp
       
   485 9139:AUE_QueryPointer:XQueryPointer(3X11):xp
       
   486 9140:AUE_GetMotionEvents:XGetMotionEvents(3X11):xp
       
   487 9141:AUE_TranslateCoords:XTranslateCoords(3X11):xp
       
   488 9142:AUE_WarpPointer:XWarpPointer(3X11):xs
       
   489 9143:AUE_SetInputFocus:XSetInputFocus(3X11):xs
       
   490 9144:AUE_GetInputFocus:XGetInputFocus(3X11):xs
       
   491 9145:AUE_QueryKeymap:XQueryKeymap(3X11):xp
       
   492 9147:AUE_FreePixmap:XFreePixmap(3X11):xc
       
   493 9148:AUE_ChangeGC:XChangeGC(3X11):xp
       
   494 9149:AUE_CopyGC:XCopyGC(3X11):xp
       
   495 9150:AUE_SetDashes:XSetDashes(3X11):xp
       
   496 9151:AUE_SetClipRectangles:XSetClipRectangles(3X11):xp
       
   497 9152:AUE_FreeGC:XFreeGC(3X11):xc
       
   498 9153:AUE_ClearArea:XClearArea(3X11):xp
       
   499 9154:AUE_CopyArea:XCopyArea(3X11):xs
       
   500 9155:AUE_CopyPlane:XCopyPlane(3X11):xs
       
   501 9156:AUE_PolyPoint:XPolyPoint(3X11):xp
       
   502 9157:AUE_PolyLine:XPolyLine(3X11):xp
       
   503 9158:AUE_PolySegment:XPolySegment(3X11):xp
       
   504 9159:AUE_PolyRectangle:XPolyRectangle(3X11):xs
       
   505 9160:AUE_PolyArc:XPolyArc(3X11):xp
       
   506 9161:AUE_FillPolygon:XFillPolygon(3X11):xp
       
   507 9162:AUE_PolyFillRectangle:XPolyFillRectangle(3X11):xp
       
   508 9163:AUE_PolyFillArc:XPolyFillArc(3X11):xp
       
   509 9164:AUE_PutImage:XPutImage(3X11):xp
       
   510 9165:AUE_GetImage:XGetImage(3X11):xs
       
   511 9166:AUE_PolyText8:XPolyText8(3X11):xp
       
   512 9167:AUE_PolyText16:XPolyText16(3X11):xp
       
   513 9168:AUE_ImageText8:XImageText8(3X11):xp
       
   514 9169:AUE_ImageText16:XImageText16(3X11):xp
       
   515 9170:AUE_CreateColormap:XCreateColormap(3X11):xc
       
   516 9171:AUE_FreeColormap:XFreeColormap(3X11):xc
       
   517 9172:AUE_CopyColormapAndFree:XCopyColormapAndFree(3X11):xp
       
   518 9175:AUE_ListInstalledColormaps:XListInstalledColormaps(3X11):xs
       
   519 9176:AUE_AllocColor:XAllocColor(3X11):xc
       
   520 9177:AUE_AllocNamedColor:XAllocNamedColor(3X11):xc
       
   521 9178:AUE_AllocColorCells:XAllocColorCells(3X11):xc
       
   522 9179:AUE_AllocColorPlanes:XAllocColorPlanes(3X11):xc
       
   523 9180:AUE_FreeColors:XFreeColors(3X11):xc
       
   524 9181:AUE_StoreColors:XStoreColors(3X11):xp
       
   525 9182:AUE_StoreNamedColor:XStoreNamedColor(3X11):xp
       
   526 9183:AUE_QueryColors:XQueryColors(3X11):xp
       
   527 9184:AUE_LookupColor:XLookupColor(3X11):xp
       
   528 9185:AUE_CreateCursor:XCreateCursor(3X11):xc
       
   529 9186:AUE_CreateGlyphCursor:XCreateGlyphCursor(3X11):xc
       
   530 9187:AUE_FreeCursor:XFreeCursor(3X11):xc
       
   531 9188:AUE_RecolorCursor:XRecolorCursor(3X11):xp
       
   532 9189:AUE_ChangeKeyboardMapping:XChangeKeyboardMapping(3X11):xs
       
   533 9190:AUE_ChangeKeyboardControl:XChangeKeyboardControl(3X11):xs
       
   534 9191:AUE_Bell:XBell(3X11):xs
       
   535 9192:AUE_ChangePointerControl:XChangePointerControl(3X11):xs
       
   536 9198:AUE_RotateProperties:XRotateProperties(3X11):xp
       
   537 9199:AUE_ForceScreenSaver:XForceScreenSaver(3X11):xp
       
   538 9200:AUE_SetPointerMapping:XSetPointerMapping(3X11):xs
       
   539 9201:AUE_SetModifierMapping:XSetModifierMapping(3X11):xs