--- a/usr/src/lib/libbsm/audit_event.txt Thu Mar 23 19:49:27 2006 -0800
+++ b/usr/src/lib/libbsm/audit_event.txt Fri Mar 24 12:29:20 2006 -0800
@@ -1,13 +1,13 @@
#
-# Copyright 2005 Sun Microsystems, Inc. All rights reserved.
+# Copyright 2006 Sun Microsystems, Inc. All rights reserved.
# Use is subject to license terms.
#
+#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
-# Common Development and Distribution License, Version 1.0 only
-# (the "License"). You may not use this file except in compliance
-# with the License.
+# Common Development and Distribution License (the "License").
+# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
@@ -48,10 +48,25 @@
# 2048 - 32767 Reserved for the Solaris TCB programs.
# 32768 - 65535 Available for third party TCB applications.
#
-# 6144 - 32767 SunOS 5.X user level audit events
+#
+# Allocation of reserved kernel events:
+# (NOTE: the kernel event table, and possibly MAX_KEVENTS, must be updated
+# in audit_kevents.h when changes are made to kernel events.)
+# 1 - 511 allocated for Solaris
+# 512 - 1023 allocated for Trusted Solaris/Trusted Extensions
+# 1024 - 2047 (reserved but not allocated)
+#
+# Allocation of user level audit events:
+# 2048 - 5999 (reserved but not allocated)
+# 6000 - 7999 allocated for Solaris
+# 8000 - 8999 (reserved but not allocated)
+# 9000 - 9999 allocated for Trusted Solaris/Trusted Extensions
+# 10000 - 32767 (reserved but not allocated)
+# 32768 - 65535 (Available for third party TCB applications)
#
#
# kernel audit events
+# 1 - 511 allocated for Solaris
#
0:AUE_NULL:indir system call:no
1:AUE_EXIT:exit(2):ps
@@ -173,8 +188,6 @@
113:AUE_SYSTEMBOOT:system booted:na
114:AUE_ASYNC_DAEMON_EXIT:async_daemon(2) exited:no
115:AUE_NFSSVC_EXIT:nfssvc(2) exited:no
-128:AUE_WRITEL:writel(2):no
-129:AUE_WRITEVL:writevl(2):no
130:AUE_GETAUID:getauid(2):aa
131:AUE_SETAUID:setauid(2):aa
132:AUE_GETAUDIT:getaudit(2):aa
@@ -328,7 +341,12 @@
292:AUE_CRYPTOADM:kernel cryptographic framework:as
293:AUE_CONFIGSSL:configure kernel SSL:as
#
+# Trusted Solaris/Trusted Extensions kernel audit events
+# 512 - 1023 allocated for Trusted Solaris/Trusted Extensions
+#
+#
# user level audit events
+# 6000 - 7999 allocated for Solaris
#
# 2048 - 6143 Reserved
#
@@ -409,3 +427,113 @@
6225:AUE_inetd_failrate:inetd failrate:na
6226:AUE_inetd_ratelimit:inetd ratelimit:na
6227:AUE_zlogin:login - zlogin:lo
+#
+# Trusted Solaris/Trusted Extensions user level audit events
+# 9000 - 9999 allocated for Trusted Solaris/Trusted Extensions
+#
+9035:AUE_sl_change:Workspace label change:ap
+9037:AUE_file_copy:file copy:fm
+9038:AUE_file_move:file move:fm
+9039:AUE_sel_mgr_xfer:selection manager transfer:fm
+9101:AUE_ClientConnect:client connection to x server:lo
+9102:AUE_ClientDisconnect:client disconn. from x server:lo
+9120:AUE_ChangeProperty:XChangeProperty(3X11):xc
+9121:AUE_DeleteProperty:XDeleteProperty(3X11):xc
+9137:AUE_GrabServer:XGrabServer(3X11):ot
+9138:AUE_UngrabServer:XUngrabServer(3X11):ot
+9146:AUE_SetFontPath:XSetFontPath(3X11):ot
+9173:AUE_InstallColormap:XInstallColormap(3X11):ot
+9174:AUE_UninstallColormap:XUninstallColormap(3X11):xp
+9193:AUE_SetScreenSaver:XSetScreenSaver(3X11):xp
+9194:AUE_ChangeHosts:XChangeHosts(3X11):ot
+9195:AUE_SetAccessControl:XSetAccessControl(3X11):xp
+9196:AUE_SetCloseDownMode:XSetCloseDownMode(3X11):xs
+9197:AUE_KillClient:XKillClient(3X11):xc
+9202:AUE_XExtensions:X server extensions:xp
+9103:AUE_CreateWindow:XCreateWindow(3X11):xc
+9104:AUE_ChangeWindowAttributes:XChangeWindowAttributes(3X11):xp
+9105:AUE_GetWindowAttributes:XGetWindowAttributes(3X11):xp
+9106:AUE_DestroyWindow:XDestroyWindow(3X11):xc
+9107:AUE_DestroySubwindows:XDestroySubwindows(3X11):xc
+9108:AUE_ChangeSaveSet:XChangeSaveSet(3X11):xp
+9109:AUE_ReparentWindow:XReparentWindow(3X11):xp
+9110:AUE_MapWindow:XMapWindow(3X11):xp
+9111:AUE_MapSubwindows:XMapSubwindows(3X11):xp
+9112:AUE_UnmapWindow:XUnmapWindow(3X11):xp
+9113:AUE_UnmapSubwindows:XUnmapSubwindows(3X11):xp
+9114:AUE_ConfigureWindow:XConfigureWindow(3X11):xp
+9115:AUE_CirculateWindow:XCirculateWindow(3X11):xp
+9116:AUE_GetGeometry:XGetGeometry(3X11):xp
+9117:AUE_QueryTree:XQueryTree(3X11):xp
+9118:AUE_InternAtom:XInternAtom(3X11):xs
+9119:AUE_GetAtomName:XGetAtomName(3X11):xs
+9122:AUE_GetProperty:XGetProperty(3X11):xp
+9123:AUE_ListProperties:XListProperties(3X11):xp
+9124:AUE_SetSelectionOwner:XSetSelectionOwner(3X11):xp
+9125:AUE_GetSelectionOwner:XGetSelectionOwner(3X11):xs
+9126:AUE_ConvertSelection:XConvertSelection(3X11):xs
+9127:AUE_SendEvent:XSendEvent(3X11):xs
+9128:AUE_GrabPointer:XGrabPointer(3X11):xs
+9129:AUE_UngrabPointer:XUngrabPointer(3X11):xs
+9130:AUE_GrabButton:XGrabButton(3X11):xp
+9131:AUE_UngrabButton:XUngrabButton(3X11):xs
+9132:AUE_ChangeActivePointerGrab:XChangeActivePointerGrab(3X11):xs
+9133:AUE_GrabKeyboard:XGrabKeyboard(3X11):xp
+9134:AUE_UngrabKeyboard:XUngrabKeyboard(3X11):xs
+9135:AUE_GrabKey:XGrabKey(3X11):xp
+9136:AUE_UngrabKey:XUngrabKey(3X11):xp
+9139:AUE_QueryPointer:XQueryPointer(3X11):xp
+9140:AUE_GetMotionEvents:XGetMotionEvents(3X11):xp
+9141:AUE_TranslateCoords:XTranslateCoords(3X11):xp
+9142:AUE_WarpPointer:XWarpPointer(3X11):xs
+9143:AUE_SetInputFocus:XSetInputFocus(3X11):xs
+9144:AUE_GetInputFocus:XGetInputFocus(3X11):xs
+9145:AUE_QueryKeymap:XQueryKeymap(3X11):xp
+9147:AUE_FreePixmap:XFreePixmap(3X11):xc
+9148:AUE_ChangeGC:XChangeGC(3X11):xp
+9149:AUE_CopyGC:XCopyGC(3X11):xp
+9150:AUE_SetDashes:XSetDashes(3X11):xp
+9151:AUE_SetClipRectangles:XSetClipRectangles(3X11):xp
+9152:AUE_FreeGC:XFreeGC(3X11):xc
+9153:AUE_ClearArea:XClearArea(3X11):xp
+9154:AUE_CopyArea:XCopyArea(3X11):xs
+9155:AUE_CopyPlane:XCopyPlane(3X11):xs
+9156:AUE_PolyPoint:XPolyPoint(3X11):xp
+9157:AUE_PolyLine:XPolyLine(3X11):xp
+9158:AUE_PolySegment:XPolySegment(3X11):xp
+9159:AUE_PolyRectangle:XPolyRectangle(3X11):xs
+9160:AUE_PolyArc:XPolyArc(3X11):xp
+9161:AUE_FillPolygon:XFillPolygon(3X11):xp
+9162:AUE_PolyFillRectangle:XPolyFillRectangle(3X11):xp
+9163:AUE_PolyFillArc:XPolyFillArc(3X11):xp
+9164:AUE_PutImage:XPutImage(3X11):xp
+9165:AUE_GetImage:XGetImage(3X11):xs
+9166:AUE_PolyText8:XPolyText8(3X11):xp
+9167:AUE_PolyText16:XPolyText16(3X11):xp
+9168:AUE_ImageText8:XImageText8(3X11):xp
+9169:AUE_ImageText16:XImageText16(3X11):xp
+9170:AUE_CreateColormap:XCreateColormap(3X11):xc
+9171:AUE_FreeColormap:XFreeColormap(3X11):xc
+9172:AUE_CopyColormapAndFree:XCopyColormapAndFree(3X11):xp
+9175:AUE_ListInstalledColormaps:XListInstalledColormaps(3X11):xs
+9176:AUE_AllocColor:XAllocColor(3X11):xc
+9177:AUE_AllocNamedColor:XAllocNamedColor(3X11):xc
+9178:AUE_AllocColorCells:XAllocColorCells(3X11):xc
+9179:AUE_AllocColorPlanes:XAllocColorPlanes(3X11):xc
+9180:AUE_FreeColors:XFreeColors(3X11):xc
+9181:AUE_StoreColors:XStoreColors(3X11):xp
+9182:AUE_StoreNamedColor:XStoreNamedColor(3X11):xp
+9183:AUE_QueryColors:XQueryColors(3X11):xp
+9184:AUE_LookupColor:XLookupColor(3X11):xp
+9185:AUE_CreateCursor:XCreateCursor(3X11):xc
+9186:AUE_CreateGlyphCursor:XCreateGlyphCursor(3X11):xc
+9187:AUE_FreeCursor:XFreeCursor(3X11):xc
+9188:AUE_RecolorCursor:XRecolorCursor(3X11):xp
+9189:AUE_ChangeKeyboardMapping:XChangeKeyboardMapping(3X11):xs
+9190:AUE_ChangeKeyboardControl:XChangeKeyboardControl(3X11):xs
+9191:AUE_Bell:XBell(3X11):xs
+9192:AUE_ChangePointerControl:XChangePointerControl(3X11):xs
+9198:AUE_RotateProperties:XRotateProperties(3X11):xp
+9199:AUE_ForceScreenSaver:XForceScreenSaver(3X11):xp
+9200:AUE_SetPointerMapping:XSetPointerMapping(3X11):xs
+9201:AUE_SetModifierMapping:XSetModifierMapping(3X11):xs