PERFORCE change 148297 for review

[Diego Giagio]

http://perforce.freebsd.org/chv.cgi?CH=148297

Change 148297 by diego at diego_black on 2008/08/24 21:38:14

	Add firewall events to audit_events

Affected files ...

.. //depot/projects/soc2008/diego-audit/src/contrib/openbsm/etc/audit_event#2 edit

Differences ...

==== //depot/projects/soc2008/diego-audit/src/contrib/openbsm/etc/audit_event#2 (text) ====

@@ -499,6 +499,15 @@
 43152:AUE_SYMLINKAT:symlinkat(2):fc
 43153:AUE_PFIL_ENABLE:enable packet filter:fl
 43154:AUE_PFIL_DISABLE:disable packet filter:fl
+43155:AUE_PFIL_POLICY_ADDRULE:Add packet filter rule:fl
+43156:AUE_PFIL_POLICY_DELRULE:Delete packet filter rule:fl
+43157:AUE_PFIL_POLICY_FLUSH:Flush packet filter rules:fl
+43158:AUE_PFIL_POLICY_ADDTABLE:Add packet filter table:fl
+43159:AUE_PFIL_POLICY_DELTABLE:Delete packet filter table:fl
+43160:AUE_PFIL_POLICY_FLUSHTABLE:Flush packet filter table:fl
+43161:AUE_PFIL_FLOW_BEGIN:Connection flow begin:fl
+43162:AUE_PFIL_FLOW_END:Connection flow end:fl
+
 #
 #
 # User space system events.