PERFORCE change 85435 for review

[Robert Watson]

http://perforce.freebsd.org/chv.cgi?CH=85435

Change 85435 by rwatson at rwatson_zoo on 2005/10/17 13:47:11

	Annotations, comments, and updates for the audit kernel event list
	and audit_event class entries and mappings.

Affected files ...

.. //depot/projects/trustedbsd/audit3/contrib/openbsm/bsm/audit_kevents.h#9 integrate
.. //depot/projects/trustedbsd/audit3/contrib/openbsm/etc/audit_event#3 integrate

Differences ...

==== //depot/projects/trustedbsd/audit3/contrib/openbsm/bsm/audit_kevents.h#9 (text+ko) ====

@@ -177,9 +177,12 @@
 #define	AUE_SOCKET		183
 #define	AUE_SENDTO		184
 #define	AUE_PIPE		185
+					/* XXXRW: XXX Solaris socketpair()? */
+					/* XXXRW: XXX Solaris send()? */
 #define	AUE_SENDMSG		188
 #define	AUE_O_SEND		AUE_SENDMSG
 #define	AUE_O_SENDMSG		AUE_SENDMSG
+					/* XXXRW: XXX Solaris recv()? */
 #define	AUE_RECVMSG		190
 #define	AUE_O_RECV		AUE_RECVMSG
 #define	AUE_O_RECVMSG		AUE_RECVMSG
@@ -191,11 +194,15 @@
 #define	AUE_WRITE		195
 #define	AUE_WRITEV		196
 #define	AUE_READV		198
-#define	AUE_SETUID		200
-#define	AUE_STIME		201
-#define	AUE_UTIME		202
-#define	AUE_NICE		203
-#define	AUE_SETGID		205
+					/* XXXRW: XXX Solaris old stat()? */
+#define	AUE_SETUID		200	/* XXXRW: Solaris old setuid? */
+#define	AUE_STIME		201	/* XXXRW: Solaris old stime? */
+#define	AUE_UTIME		202	/* XXXRW: Solaris old utime? */
+#define	AUE_NICE		203	/* XXXRW: Solaris old nice? */
+					/* XXXRW: Solaris old setpgrp? */
+#define	AUE_SETGID		205	/* XXXRW: Solaris old setgid? */
+					/* XXXRW: Solaris readl? */
+					/* XXXRW: Solaris readvl()? */
 #define	AUE_DUP2		209
 #define	AUE_MMAP		210
 #define	AUE_O_MMAP		AUE_MMAP
@@ -208,6 +215,7 @@
 #define	AUE_GETMSG		217
 #define	AUE_PUTPMSG		218
 #define	AUE_GETPMSG		219
+					/* XXXRW: Solaris sc placeholder? */
 #define	AUE_AUDITON_GETKMASK	221
 #define	AUE_AUDITON_SETKMASK	222
 #define	AUE_AUDITON_GETCWD	223
@@ -220,7 +228,7 @@
 #define	AUE_AUDITON_SETCOND	230
 #define	AUE_AUDITON_GETCLASS	231
 #define	AUE_AUDITON_SETCLASS	232
-#define	AUE_UTSYS		233
+#define	AUE_UTSSYS		233
 #define	AUE_STATVFS		234
 #define	AUE_XSTAT		235
 #define	AUE_LXSTAT		236
@@ -229,6 +237,7 @@
 #define	AUE_SYSINFO		239
 #define	AUE_XMKNOD		240
 #define	AUE_FORK1		241
+					/* XXXRW: Solaris modctl()? */
 #define	AUE_MODLOAD		243
 #define	AUE_MODUNLOAD		244
 #define	AUE_MODCONFIG		245
@@ -268,7 +277,7 @@
 #define	AUE_FLOCK		314	/* XXX: See AUE_SOLARIS_FLOCK. */
 #define	AUE_MKFIFO		315
 #define	AUE_POLL		316
-#define	AUE_SOCKETPAIR		317
+#define	AUE_SOCKETPAIR		317	/* XXXRW: What about 186? */
 #define	AUE_FUTIMES		318
 #define	AUE_SETSID		319
 #define	AUE_SETPRIVEXEC		320
@@ -434,6 +443,5 @@
 #define	AUE_TABLE		AUE_NULL
 #define	AUE_WAITEVENT		AUE_NULL
 #define	AUE_WATCHEVENT		AUE_NULL
-#define	AU_WAIT4		AUE_NULL
 
 #endif /* !_BSM_AUDIT_KEVENTS_H_ */

==== //depot/projects/trustedbsd/audit3/contrib/openbsm/etc/audit_event#3 (text+ko) ====

@@ -8,7 +8,7 @@
 7:AUE_EXEC:exec(2):pc,ex
 8:AUE_CHDIR:chdir(2):pc
 9:AUE_MKNOD:mknod(2):ad
-10:AUE_CHMOD:chmod(2):ad
+10:AUE_CHMOD:chmod(2):fm
 11:AUE_CHOWN:chown(2):fm
 12:AUE_UMOUNT:umount(2) - old version:ad
 13:AUE_JUNK:junk:no
@@ -225,6 +225,8 @@
 262:AUE_P_ONLINE:p_online(2):ad
 263:AUE_PROCESSOR_BIND:processor_bind(2):ad
 264:AUE_INST_SYNC:inst_sync(2):ad
+266:AUE_SETAUDIT_ADDR:setaudit_addr(2):ad
+267:AUE_GETAUDIT_ADDR:getaudit_addr(2):ad
 301:AUE_GETFSSTAT:getfsstat(2):fa
 302:AUE_PTRACE:ptrace(2):pc
 303:AUE_CHFLAGS:chflags(2):fm
@@ -240,6 +242,7 @@
 313:AUE_SETTIMEOFDAY:settimeofday(2):ad
 314:AUE_FLOCK:flock(2):fm
 315:AUE_MKFIFO:mkfifo(2):fc
+316:AUE_POLL:poll(2):fa
 317:AUE_SOCKETPAIR:socketpair(2):nt
 318:AUE_FUTIMES:futimes(2):fm
 319:AUE_SETSID:setsid(2):pc
@@ -276,6 +279,8 @@
 350:AUE_PTHREADKILL:pthread_kill(2):pc
 351:AUE_PTHREADSIGMASK:pthread_sigmask(2):pc
 352:AUE_AUDITCTL:auditctl(2):ad
+353:AUE_RFORK:rfork(2):pc
+354:AUE_LCHMOD:lchmod(2):fm
 355:AUE_SWAPOFF:swapoff():ad
 356:AUE_INITPROCESS:init_process():pc
 357:AUE_MAPFD:map_fd():fa
@@ -297,6 +302,9 @@
 373:AUE_FHOPEN:fhopen(2):fa
 374:AUE_FHSTAT:fhstat(2):fa
 375:AUE_JAIL:jail(2):pc
+376:AUE_EACCESS:eaccess(2):fa
+377:AUE_KQUEUE:kqueue(2):fa
+378:AUE_KEVENT:kevent(2):fa
 6152:AUE_login:login - local:lo
 6153:AUE_logout:logout - local:lo
 6159:AUE_su:su(1):lo
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message