1185573Srwatson/*- 2191270Srwatson * Copyright (c) 2005-2009 Apple Inc. 3141144Srwatson * All rights reserved. 4141144Srwatson * 5141144Srwatson * Redistribution and use in source and binary forms, with or without 6141144Srwatson * modification, are permitted provided that the following conditions 7141144Srwatson * are met: 8141144Srwatson * 9155191Srwatson * 1. Redistributions of source code must retain the above copyright 10155191Srwatson * notice, this list of conditions and the following disclaimer. 11155191Srwatson * 2. Redistributions in binary form must reproduce the above copyright 12155191Srwatson * notice, this list of conditions and the following disclaimer in the 13155191Srwatson * documentation and/or other materials provided with the distribution. 14181053Srwatson * 3. Neither the name of Apple Inc. ("Apple") nor the names of 15155191Srwatson * its contributors may be used to endorse or promote products derived 16155191Srwatson * from this software without specific prior written permission. 17141144Srwatson * 18155191Srwatson * THIS SOFTWARE IS PROVIDED BY APPLE AND ITS CONTRIBUTORS "AS IS" AND ANY 19155191Srwatson * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED 20155191Srwatson * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 21155191Srwatson * DISCLAIMED. IN NO EVENT SHALL APPLE OR ITS CONTRIBUTORS BE LIABLE FOR ANY 22155191Srwatson * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES 23155191Srwatson * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 24155191Srwatson * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND 25155191Srwatson * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 26155191Srwatson * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 27155191Srwatson * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 28155191Srwatson * 29141144Srwatson * $FreeBSD$ 30141144Srwatson */ 31141144Srwatson 32146760Srwatson#ifndef _BSM_AUDIT_KEVENTS_H_ 33146760Srwatson#define _BSM_AUDIT_KEVENTS_H_ 34141144Srwatson 35141144Srwatson/* 36293163Sbrueffer * The reserved event numbers for kernel events are 1...2047 and 43001..44999. 37191270Srwatson */ 38246698Spjd#define AUE_IS_A_KEVENT(e) (((e) > 0 && (e) < 2048) || \ 39246698Spjd ((e) > 43000 && (e) < 45000)) 40191270Srwatson 41191270Srwatson/* 42155191Srwatson * Values marked as AUE_NULL are not required to be audited as per CAPP. 43155191Srwatson * 44155191Srwatson * Some conflicts exist in the assignment of name to event number mappings 45155191Srwatson * between BSM implementations. In general, we prefer the OpenSolaris 46155191Srwatson * definition as we consider Solaris BSM to be authoritative. _DARWIN_ has 47155191Srwatson * been inserted for the Darwin variants. If necessary, other tags will be 48155191Srwatson * added in the future. 49141144Srwatson */ 50155191Srwatson#define AUE_NULL 0 51155191Srwatson#define AUE_EXIT 1 52155191Srwatson#define AUE_FORK 2 53171542Srwatson#define AUE_FORKALL AUE_FORK /* Solaris-specific. */ 54155191Srwatson#define AUE_OPEN 3 55155191Srwatson#define AUE_CREAT 4 56155191Srwatson#define AUE_LINK 5 57155191Srwatson#define AUE_UNLINK 6 58171542Srwatson#define AUE_DELETE AUE_UNLINK /* Darwin-specific. */ 59155191Srwatson#define AUE_EXEC 7 60155191Srwatson#define AUE_CHDIR 8 61155191Srwatson#define AUE_MKNOD 9 62155191Srwatson#define AUE_CHMOD 10 63155191Srwatson#define AUE_CHOWN 11 64155191Srwatson#define AUE_UMOUNT 12 65155191Srwatson#define AUE_JUNK 13 /* Solaris-specific. */ 66155191Srwatson#define AUE_ACCESS 14 67155191Srwatson#define AUE_KILL 15 68155191Srwatson#define AUE_STAT 16 69155191Srwatson#define AUE_LSTAT 17 70155191Srwatson#define AUE_ACCT 18 71155191Srwatson#define AUE_MCTL 19 /* Solaris-specific. */ 72155191Srwatson#define AUE_REBOOT 20 /* XXX: Darwin conflict. */ 73155191Srwatson#define AUE_SYMLINK 21 74155191Srwatson#define AUE_READLINK 22 75155191Srwatson#define AUE_EXECVE 23 76155191Srwatson#define AUE_CHROOT 24 77155191Srwatson#define AUE_VFORK 25 78155191Srwatson#define AUE_SETGROUPS 26 79155191Srwatson#define AUE_SETPGRP 27 80155191Srwatson#define AUE_SWAPON 28 81155191Srwatson#define AUE_SETHOSTNAME 29 /* XXX: Darwin conflict. */ 82155191Srwatson#define AUE_FCNTL 30 83155191Srwatson#define AUE_SETPRIORITY 31 /* XXX: Darwin conflict. */ 84155191Srwatson#define AUE_CONNECT 32 85155191Srwatson#define AUE_ACCEPT 33 86155191Srwatson#define AUE_BIND 34 87155191Srwatson#define AUE_SETSOCKOPT 35 88155191Srwatson#define AUE_VTRACE 36 /* Solaris-specific. */ 89155191Srwatson#define AUE_SETTIMEOFDAY 37 /* XXX: Darwin conflict. */ 90155191Srwatson#define AUE_FCHOWN 38 91155191Srwatson#define AUE_FCHMOD 39 92155191Srwatson#define AUE_SETREUID 40 93155191Srwatson#define AUE_SETREGID 41 94155191Srwatson#define AUE_RENAME 42 95155191Srwatson#define AUE_TRUNCATE 43 /* XXX: Darwin conflict. */ 96155191Srwatson#define AUE_FTRUNCATE 44 /* XXX: Darwin conflict. */ 97155191Srwatson#define AUE_FLOCK 45 /* XXX: Darwin conflict. */ 98155191Srwatson#define AUE_SHUTDOWN 46 99155191Srwatson#define AUE_MKDIR 47 100155191Srwatson#define AUE_RMDIR 48 101155191Srwatson#define AUE_UTIMES 49 102155191Srwatson#define AUE_ADJTIME 50 103155191Srwatson#define AUE_SETRLIMIT 51 104155191Srwatson#define AUE_KILLPG 52 105155191Srwatson#define AUE_NFS_SVC 53 /* XXX: Darwin conflict. */ 106155191Srwatson#define AUE_STATFS 54 107155191Srwatson#define AUE_FSTATFS 55 108155191Srwatson#define AUE_UNMOUNT 56 /* XXX: Darwin conflict. */ 109155191Srwatson#define AUE_ASYNC_DAEMON 57 110155191Srwatson#define AUE_NFS_GETFH 58 /* XXX: Darwin conflict. */ 111155191Srwatson#define AUE_SETDOMAINNAME 59 112155191Srwatson#define AUE_QUOTACTL 60 /* XXX: Darwin conflict. */ 113155191Srwatson#define AUE_EXPORTFS 61 114155191Srwatson#define AUE_MOUNT 62 115155191Srwatson#define AUE_SEMSYS 63 116155191Srwatson#define AUE_MSGSYS 64 117155191Srwatson#define AUE_SHMSYS 65 118155191Srwatson#define AUE_BSMSYS 66 /* Solaris-specific. */ 119155191Srwatson#define AUE_RFSSYS 67 /* Solaris-specific. */ 120155191Srwatson#define AUE_FCHDIR 68 121155191Srwatson#define AUE_FCHROOT 69 122155191Srwatson#define AUE_VPIXSYS 70 /* Solaris-specific. */ 123155191Srwatson#define AUE_PATHCONF 71 124155191Srwatson#define AUE_OPEN_R 72 125155191Srwatson#define AUE_OPEN_RC 73 126155191Srwatson#define AUE_OPEN_RT 74 127155191Srwatson#define AUE_OPEN_RTC 75 128155191Srwatson#define AUE_OPEN_W 76 129155191Srwatson#define AUE_OPEN_WC 77 130155191Srwatson#define AUE_OPEN_WT 78 131155191Srwatson#define AUE_OPEN_WTC 79 132155191Srwatson#define AUE_OPEN_RW 80 133155191Srwatson#define AUE_OPEN_RWC 81 134155191Srwatson#define AUE_OPEN_RWT 82 135155191Srwatson#define AUE_OPEN_RWTC 83 136155191Srwatson#define AUE_MSGCTL 84 137155191Srwatson#define AUE_MSGCTL_RMID 85 138155191Srwatson#define AUE_MSGCTL_SET 86 139155191Srwatson#define AUE_MSGCTL_STAT 87 140155191Srwatson#define AUE_MSGGET 88 141155191Srwatson#define AUE_MSGRCV 89 142155191Srwatson#define AUE_MSGSND 90 143155191Srwatson#define AUE_SHMCTL 91 144155191Srwatson#define AUE_SHMCTL_RMID 92 145155191Srwatson#define AUE_SHMCTL_SET 93 146155191Srwatson#define AUE_SHMCTL_STAT 94 147155191Srwatson#define AUE_SHMGET 95 148155191Srwatson#define AUE_SHMAT 96 149155191Srwatson#define AUE_SHMDT 97 150155191Srwatson#define AUE_SEMCTL 98 151155191Srwatson#define AUE_SEMCTL_RMID 99 152155191Srwatson#define AUE_SEMCTL_SET 100 153155191Srwatson#define AUE_SEMCTL_STAT 101 154155191Srwatson#define AUE_SEMCTL_GETNCNT 102 155155191Srwatson#define AUE_SEMCTL_GETPID 103 156155191Srwatson#define AUE_SEMCTL_GETVAL 104 157155191Srwatson#define AUE_SEMCTL_GETALL 105 158155191Srwatson#define AUE_SEMCTL_GETZCNT 106 159155191Srwatson#define AUE_SEMCTL_SETVAL 107 160155191Srwatson#define AUE_SEMCTL_SETALL 108 161155191Srwatson#define AUE_SEMGET 109 162155191Srwatson#define AUE_SEMOP 110 163155191Srwatson#define AUE_CORE 111 /* Solaris-specific, currently. */ 164155191Srwatson#define AUE_CLOSE 112 165171542Srwatson#define AUE_SYSTEMBOOT 113 /* Solaris-specific. */ 166155191Srwatson#define AUE_ASYNC_DAEMON_EXIT 114 /* Solaris-specific. */ 167155191Srwatson#define AUE_NFSSVC_EXIT 115 /* Solaris-specific. */ 168155191Srwatson#define AUE_WRITEL 128 /* Solaris-specific. */ 169155191Srwatson#define AUE_WRITEVL 129 /* Solaris-specific. */ 170155191Srwatson#define AUE_GETAUID 130 171155191Srwatson#define AUE_SETAUID 131 172155191Srwatson#define AUE_GETAUDIT 132 173155191Srwatson#define AUE_SETAUDIT 133 174155191Srwatson#define AUE_GETUSERAUDIT 134 /* Solaris-specific. */ 175155191Srwatson#define AUE_SETUSERAUDIT 135 /* Solaris-specific. */ 176155191Srwatson#define AUE_AUDITSVC 136 /* Solaris-specific. */ 177155191Srwatson#define AUE_AUDITUSER 137 /* Solaris-specific. */ 178155191Srwatson#define AUE_AUDITON 138 179155191Srwatson#define AUE_AUDITON_GTERMID 139 /* Solaris-specific. */ 180155191Srwatson#define AUE_AUDITON_STERMID 140 /* Solaris-specific. */ 181155191Srwatson#define AUE_AUDITON_GPOLICY 141 182155191Srwatson#define AUE_AUDITON_SPOLICY 142 183155191Srwatson#define AUE_AUDITON_GQCTRL 145 184155191Srwatson#define AUE_AUDITON_SQCTRL 146 185155191Srwatson#define AUE_GETKERNSTATE 147 /* Solaris-specific. */ 186155191Srwatson#define AUE_SETKERNSTATE 148 /* Solaris-specific. */ 187155191Srwatson#define AUE_GETPORTAUDIT 149 /* Solaris-specific. */ 188171542Srwatson#define AUE_AUDITSTAT 150 /* Solaris-specific. */ 189171542Srwatson#define AUE_REVOKE 151 190171542Srwatson#define AUE_MAC 152 /* Solaris-specific. */ 191155191Srwatson#define AUE_ENTERPROM 153 /* Solaris-specific. */ 192155191Srwatson#define AUE_EXITPROM 154 /* Solaris-specific. */ 193171542Srwatson#define AUE_IFLOAT 155 /* Solaris-specific. */ 194171542Srwatson#define AUE_PFLOAT 156 /* Solaris-specific. */ 195171542Srwatson#define AUE_UPRIV 157 /* Solaris-specific. */ 196155191Srwatson#define AUE_IOCTL 158 197155191Srwatson#define AUE_SOCKET 183 198155191Srwatson#define AUE_SENDTO 184 199155191Srwatson#define AUE_PIPE 185 200155191Srwatson#define AUE_SOCKETPAIR 186 /* XXX: Darwin conflict. */ 201155191Srwatson#define AUE_SEND 187 202155191Srwatson#define AUE_SENDMSG 188 203155191Srwatson#define AUE_RECV 189 204155191Srwatson#define AUE_RECVMSG 190 205155191Srwatson#define AUE_RECVFROM 191 206155191Srwatson#define AUE_READ 192 207171542Srwatson#define AUE_GETDENTS 193 208155191Srwatson#define AUE_LSEEK 194 209155191Srwatson#define AUE_WRITE 195 210155191Srwatson#define AUE_WRITEV 196 211155191Srwatson#define AUE_NFS 197 /* Solaris-specific. */ 212155191Srwatson#define AUE_READV 198 213171542Srwatson#define AUE_OSTAT 199 /* Solaris-specific. */ 214155191Srwatson#define AUE_SETUID 200 /* XXXRW: Solaris old setuid? */ 215155191Srwatson#define AUE_STIME 201 /* XXXRW: Solaris old stime? */ 216155191Srwatson#define AUE_UTIME 202 /* XXXRW: Solaris old utime? */ 217155191Srwatson#define AUE_NICE 203 /* XXXRW: Solaris old nice? */ 218171542Srwatson#define AUE_OSETPGRP 204 /* Solaris-specific. */ 219171542Srwatson#define AUE_SETGID 205 220171542Srwatson#define AUE_READL 206 /* Solaris-specific. */ 221171542Srwatson#define AUE_READVL 207 /* Solaris-specific. */ 222171542Srwatson#define AUE_FSTAT 208 223155191Srwatson#define AUE_DUP2 209 224155191Srwatson#define AUE_MMAP 210 225155191Srwatson#define AUE_AUDIT 211 226171542Srwatson#define AUE_PRIOCNTLSYS 212 /* Solaris-specific. */ 227155191Srwatson#define AUE_MUNMAP 213 228155191Srwatson#define AUE_SETEGID 214 229155191Srwatson#define AUE_SETEUID 215 230171542Srwatson#define AUE_PUTMSG 216 /* Solaris-specific. */ 231155191Srwatson#define AUE_GETMSG 217 /* Solaris-specific. */ 232155191Srwatson#define AUE_PUTPMSG 218 /* Solaris-specific. */ 233155191Srwatson#define AUE_GETPMSG 219 /* Solaris-specific. */ 234155191Srwatson#define AUE_AUDITSYS 220 /* Solaris-specific. */ 235155191Srwatson#define AUE_AUDITON_GETKMASK 221 236155191Srwatson#define AUE_AUDITON_SETKMASK 222 237155191Srwatson#define AUE_AUDITON_GETCWD 223 238155191Srwatson#define AUE_AUDITON_GETCAR 224 239155191Srwatson#define AUE_AUDITON_GETSTAT 225 240155191Srwatson#define AUE_AUDITON_SETSTAT 226 241155191Srwatson#define AUE_AUDITON_SETUMASK 227 242155191Srwatson#define AUE_AUDITON_SETSMASK 228 243155191Srwatson#define AUE_AUDITON_GETCOND 229 244155191Srwatson#define AUE_AUDITON_SETCOND 230 245155191Srwatson#define AUE_AUDITON_GETCLASS 231 246155191Srwatson#define AUE_AUDITON_SETCLASS 232 247171542Srwatson#define AUE_FUSERS 233 /* Solaris-specific; also UTSSYS? */ 248155191Srwatson#define AUE_STATVFS 234 249171542Srwatson#define AUE_XSTAT 235 /* Solaris-specific. */ 250171542Srwatson#define AUE_LXSTAT 236 /* Solaris-specific. */ 251155191Srwatson#define AUE_LCHOWN 237 252155191Srwatson#define AUE_MEMCNTL 238 /* Solaris-specific. */ 253155191Srwatson#define AUE_SYSINFO 239 /* Solaris-specific. */ 254155191Srwatson#define AUE_XMKNOD 240 /* Solaris-specific. */ 255155191Srwatson#define AUE_FORK1 241 256171542Srwatson#define AUE_MODCTL 242 /* Solaris-specific. */ 257155191Srwatson#define AUE_MODLOAD 243 258155191Srwatson#define AUE_MODUNLOAD 244 259155191Srwatson#define AUE_MODCONFIG 245 /* Solaris-specific. */ 260155191Srwatson#define AUE_MODADDMAJ 246 /* Solaris-specific. */ 261171542Srwatson#define AUE_SOCKACCEPT 247 /* Solaris-specific. */ 262171542Srwatson#define AUE_SOCKCONNECT 248 /* Solaris-specific. */ 263171542Srwatson#define AUE_SOCKSEND 249 /* Solaris-specific. */ 264171542Srwatson#define AUE_SOCKRECEIVE 250 /* Solaris-specific. */ 265155191Srwatson#define AUE_ACLSET 251 266155191Srwatson#define AUE_FACLSET 252 267171542Srwatson#define AUE_DOORFS 253 /* Solaris-specific. */ 268155191Srwatson#define AUE_DOORFS_DOOR_CALL 254 /* Solaris-specific. */ 269155191Srwatson#define AUE_DOORFS_DOOR_RETURN 255 /* Solaris-specific. */ 270155191Srwatson#define AUE_DOORFS_DOOR_CREATE 256 /* Solaris-specific. */ 271155191Srwatson#define AUE_DOORFS_DOOR_REVOKE 257 /* Solaris-specific. */ 272155191Srwatson#define AUE_DOORFS_DOOR_INFO 258 /* Solaris-specific. */ 273155191Srwatson#define AUE_DOORFS_DOOR_CRED 259 /* Solaris-specific. */ 274155191Srwatson#define AUE_DOORFS_DOOR_BIND 260 /* Solaris-specific. */ 275155191Srwatson#define AUE_DOORFS_DOOR_UNBIND 261 /* Solaris-specific. */ 276155191Srwatson#define AUE_P_ONLINE 262 /* Solaris-specific. */ 277155191Srwatson#define AUE_PROCESSOR_BIND 263 /* Solaris-specific. */ 278155191Srwatson#define AUE_INST_SYNC 264 /* Solaris-specific. */ 279171542Srwatson#define AUE_SOCKCONFIG 265 /* Solaris-specific. */ 280155191Srwatson#define AUE_SETAUDIT_ADDR 266 281155191Srwatson#define AUE_GETAUDIT_ADDR 267 282171542Srwatson#define AUE_UMOUNT2 268 /* Solaris-specific. */ 283171542Srwatson#define AUE_FSAT 269 /* Solaris-specific. */ 284171542Srwatson#define AUE_OPENAT_R 270 285171542Srwatson#define AUE_OPENAT_RC 271 286171542Srwatson#define AUE_OPENAT_RT 272 287171542Srwatson#define AUE_OPENAT_RTC 273 288171542Srwatson#define AUE_OPENAT_W 274 289171542Srwatson#define AUE_OPENAT_WC 275 290171542Srwatson#define AUE_OPENAT_WT 276 291171542Srwatson#define AUE_OPENAT_WTC 277 292171542Srwatson#define AUE_OPENAT_RW 278 293171542Srwatson#define AUE_OPENAT_RWC 279 294171542Srwatson#define AUE_OPENAT_RWT 280 295171542Srwatson#define AUE_OPENAT_RWTC 281 296171542Srwatson#define AUE_RENAMEAT 282 297171542Srwatson#define AUE_FSTATAT 283 298171542Srwatson#define AUE_FCHOWNAT 284 299171542Srwatson#define AUE_FUTIMESAT 285 300171542Srwatson#define AUE_UNLINKAT 286 301155191Srwatson#define AUE_CLOCK_SETTIME 287 302155191Srwatson#define AUE_NTP_ADJTIME 288 303171542Srwatson#define AUE_SETPPRIV 289 /* Solaris-specific. */ 304171542Srwatson#define AUE_MODDEVPLCY 290 /* Solaris-specific. */ 305171542Srwatson#define AUE_MODADDPRIV 291 /* Solaris-specific. */ 306171542Srwatson#define AUE_CRYPTOADM 292 /* Solaris-specific. */ 307171542Srwatson#define AUE_CONFIGKSSL 293 /* Solaris-specific. */ 308171542Srwatson#define AUE_BRANDSYS 294 /* Solaris-specific. */ 309171542Srwatson#define AUE_PF_POLICY_ADDRULE 295 /* Solaris-specific. */ 310171542Srwatson#define AUE_PF_POLICY_DELRULE 296 /* Solaris-specific. */ 311171542Srwatson#define AUE_PF_POLICY_CLONE 297 /* Solaris-specific. */ 312171542Srwatson#define AUE_PF_POLICY_FLIP 298 /* Solaris-specific. */ 313171542Srwatson#define AUE_PF_POLICY_FLUSH 299 /* Solaris-specific. */ 314171542Srwatson#define AUE_PF_POLICY_ALGS 300 /* Solaris-specific. */ 315185573Srwatson#define AUE_PORTFS 301 /* Solaris-specific. */ 316155191Srwatson 317155191Srwatson/* 318161635Srwatson * Events added for Apple Darwin that potentially collide with future Solaris 319161635Srwatson * BSM events. These are assigned AUE_DARWIN prefixes, and are deprecated in 320161635Srwatson * new trails. Systems generating these events should switch to the new 321161635Srwatson * identifiers that avoid colliding with the Solaris identifier space. 322155191Srwatson */ 323161635Srwatson#define AUE_DARWIN_GETFSSTAT 301 324161635Srwatson#define AUE_DARWIN_PTRACE 302 325161635Srwatson#define AUE_DARWIN_CHFLAGS 303 326161635Srwatson#define AUE_DARWIN_FCHFLAGS 304 327161635Srwatson#define AUE_DARWIN_PROFILE 305 328161635Srwatson#define AUE_DARWIN_KTRACE 306 329161635Srwatson#define AUE_DARWIN_SETLOGIN 307 330171542Srwatson#define AUE_DARWIN_REBOOT 308 331161635Srwatson#define AUE_DARWIN_REVOKE 309 332161635Srwatson#define AUE_DARWIN_UMASK 310 333161635Srwatson#define AUE_DARWIN_MPROTECT 311 334171542Srwatson#define AUE_DARWIN_SETPRIORITY 312 335171542Srwatson#define AUE_DARWIN_SETTIMEOFDAY 313 336171542Srwatson#define AUE_DARWIN_FLOCK 314 337161635Srwatson#define AUE_DARWIN_MKFIFO 315 338161635Srwatson#define AUE_DARWIN_POLL 316 339171542Srwatson#define AUE_DARWIN_SOCKETPAIR 317 340161635Srwatson#define AUE_DARWIN_FUTIMES 318 341161635Srwatson#define AUE_DARWIN_SETSID 319 342161635Srwatson#define AUE_DARWIN_SETPRIVEXEC 320 /* Darwin-specific. */ 343171542Srwatson#define AUE_DARWIN_NFSSVC 321 344171542Srwatson#define AUE_DARWIN_GETFH 322 345171542Srwatson#define AUE_DARWIN_QUOTACTL 323 346161635Srwatson#define AUE_DARWIN_ADDPROFILE 324 /* Darwin-specific. */ 347161635Srwatson#define AUE_DARWIN_KDEBUGTRACE 325 /* Darwin-specific. */ 348161635Srwatson#define AUE_DARWIN_KDBUGTRACE AUE_KDEBUGTRACE 349161635Srwatson#define AUE_DARWIN_FSTAT 326 350161635Srwatson#define AUE_DARWIN_FPATHCONF 327 351161635Srwatson#define AUE_DARWIN_GETDIRENTRIES 328 352171542Srwatson#define AUE_DARWIN_TRUNCATE 329 353171542Srwatson#define AUE_DARWIN_FTRUNCATE 330 354161635Srwatson#define AUE_DARWIN_SYSCTL 331 355161635Srwatson#define AUE_DARWIN_MLOCK 332 356161635Srwatson#define AUE_DARWIN_MUNLOCK 333 357161635Srwatson#define AUE_DARWIN_UNDELETE 334 358161635Srwatson#define AUE_DARWIN_GETATTRLIST 335 /* Darwin-specific. */ 359161635Srwatson#define AUE_DARWIN_SETATTRLIST 336 /* Darwin-specific. */ 360161635Srwatson#define AUE_DARWIN_GETDIRENTRIESATTR 337 /* Darwin-specific. */ 361161635Srwatson#define AUE_DARWIN_EXCHANGEDATA 338 /* Darwin-specific. */ 362161635Srwatson#define AUE_DARWIN_SEARCHFS 339 /* Darwin-specific. */ 363161635Srwatson#define AUE_DARWIN_MINHERIT 340 364161635Srwatson#define AUE_DARWIN_SEMCONFIG 341 365161635Srwatson#define AUE_DARWIN_SEMOPEN 342 366161635Srwatson#define AUE_DARWIN_SEMCLOSE 343 367161635Srwatson#define AUE_DARWIN_SEMUNLINK 344 368161635Srwatson#define AUE_DARWIN_SHMOPEN 345 369161635Srwatson#define AUE_DARWIN_SHMUNLINK 346 370161635Srwatson#define AUE_DARWIN_LOADSHFILE 347 /* Darwin-specific. */ 371161635Srwatson#define AUE_DARWIN_RESETSHFILE 348 /* Darwin-specific. */ 372161635Srwatson#define AUE_DARWIN_NEWSYSTEMSHREG 349 /* Darwin-specific. */ 373161635Srwatson#define AUE_DARWIN_PTHREADKILL 350 /* Darwin-specific. */ 374161635Srwatson#define AUE_DARWIN_PTHREADSIGMASK 351 /* Darwin-specific. */ 375161635Srwatson#define AUE_DARWIN_AUDITCTL 352 376161635Srwatson#define AUE_DARWIN_RFORK 353 377161635Srwatson#define AUE_DARWIN_LCHMOD 354 378161635Srwatson#define AUE_DARWIN_SWAPOFF 355 379161635Srwatson#define AUE_DARWIN_INITPROCESS 356 /* Darwin-specific. */ 380161635Srwatson#define AUE_DARWIN_MAPFD 357 /* Darwin-specific. */ 381161635Srwatson#define AUE_DARWIN_TASKFORPID 358 /* Darwin-specific. */ 382161635Srwatson#define AUE_DARWIN_PIDFORTASK 359 /* Darwin-specific. */ 383161635Srwatson#define AUE_DARWIN_SYSCTL_NONADMIN 360 384161635Srwatson#define AUE_DARWIN_COPYFILE 361 /* Darwin-specific. */ 385155191Srwatson 386155191Srwatson/* 387161635Srwatson * Audit event identifiers added as part of OpenBSM, generally corresponding 388161635Srwatson * to events in FreeBSD, Darwin, and Linux that were not present in Solaris. 389161635Srwatson * These often duplicate events added to the Solaris set by Darwin, but use 390161635Srwatson * event identifiers in a higher range in order to avoid colliding with 391161635Srwatson * future Solaris additions. 392171542Srwatson * 393171542Srwatson * If an event in this section is later added to Solaris, we prefer the 394171542Srwatson * Solaris event identifier, and add _OPENBSM_ to the OpenBSM-specific 395171542Srwatson * identifier so that old trails can still be processed, but new trails use 396171542Srwatson * the Solaris identifier. 397161635Srwatson */ 398161635Srwatson#define AUE_GETFSSTAT 43001 399161635Srwatson#define AUE_PTRACE 43002 400161635Srwatson#define AUE_CHFLAGS 43003 401161635Srwatson#define AUE_FCHFLAGS 43004 402161635Srwatson#define AUE_PROFILE 43005 403161635Srwatson#define AUE_KTRACE 43006 404161635Srwatson#define AUE_SETLOGIN 43007 405171542Srwatson#define AUE_OPENBSM_REVOKE 43008 /* Solaris event now preferred. */ 406161635Srwatson#define AUE_UMASK 43009 407161635Srwatson#define AUE_MPROTECT 43010 408161635Srwatson#define AUE_MKFIFO 43011 409161635Srwatson#define AUE_POLL 43012 410161635Srwatson#define AUE_FUTIMES 43013 411161635Srwatson#define AUE_SETSID 43014 412161635Srwatson#define AUE_SETPRIVEXEC 43015 /* Darwin-specific. */ 413161635Srwatson#define AUE_ADDPROFILE 43016 /* Darwin-specific. */ 414161635Srwatson#define AUE_KDEBUGTRACE 43017 /* Darwin-specific. */ 415161635Srwatson#define AUE_KDBUGTRACE AUE_KDEBUGTRACE 416171542Srwatson#define AUE_OPENBSM_FSTAT 43018 /* Solaris event now preferred. */ 417161635Srwatson#define AUE_FPATHCONF 43019 418161635Srwatson#define AUE_GETDIRENTRIES 43020 419161635Srwatson#define AUE_SYSCTL 43021 420161635Srwatson#define AUE_MLOCK 43022 421161635Srwatson#define AUE_MUNLOCK 43023 422161635Srwatson#define AUE_UNDELETE 43024 423161635Srwatson#define AUE_GETATTRLIST 43025 /* Darwin-specific. */ 424161635Srwatson#define AUE_SETATTRLIST 43026 /* Darwin-specific. */ 425161635Srwatson#define AUE_GETDIRENTRIESATTR 43027 /* Darwin-specific. */ 426161635Srwatson#define AUE_EXCHANGEDATA 43028 /* Darwin-specific. */ 427161635Srwatson#define AUE_SEARCHFS 43029 /* Darwin-specific. */ 428161635Srwatson#define AUE_MINHERIT 43030 429161635Srwatson#define AUE_SEMCONFIG 43031 430161635Srwatson#define AUE_SEMOPEN 43032 431161635Srwatson#define AUE_SEMCLOSE 43033 432161635Srwatson#define AUE_SEMUNLINK 43034 433161635Srwatson#define AUE_SHMOPEN 43035 434161635Srwatson#define AUE_SHMUNLINK 43036 435161635Srwatson#define AUE_LOADSHFILE 43037 /* Darwin-specific. */ 436161635Srwatson#define AUE_RESETSHFILE 43038 /* Darwin-specific. */ 437161635Srwatson#define AUE_NEWSYSTEMSHREG 43039 /* Darwin-specific. */ 438161635Srwatson#define AUE_PTHREADKILL 43040 /* Darwin-specific. */ 439161635Srwatson#define AUE_PTHREADSIGMASK 43041 /* Darwin-specific. */ 440161635Srwatson#define AUE_AUDITCTL 43042 441161635Srwatson#define AUE_RFORK 43043 442161635Srwatson#define AUE_LCHMOD 43044 443161635Srwatson#define AUE_SWAPOFF 43045 444161635Srwatson#define AUE_INITPROCESS 43046 /* Darwin-specific. */ 445161635Srwatson#define AUE_MAPFD 43047 /* Darwin-specific. */ 446161635Srwatson#define AUE_TASKFORPID 43048 /* Darwin-specific. */ 447161635Srwatson#define AUE_PIDFORTASK 43049 /* Darwin-specific. */ 448161635Srwatson#define AUE_SYSCTL_NONADMIN 43050 449161635Srwatson#define AUE_COPYFILE 43051 /* Darwin-specific. */ 450161635Srwatson 451161635Srwatson/* 452161635Srwatson * Events added to OpenBSM for FreeBSD and Linux; may also be used by Darwin 453161635Srwatson * in the future. 454161635Srwatson */ 455161635Srwatson#define AUE_LUTIMES 43052 456161635Srwatson#define AUE_LCHFLAGS 43053 /* FreeBSD-specific. */ 457161635Srwatson#define AUE_SENDFILE 43054 /* BSD/Linux-specific. */ 458161635Srwatson#define AUE_USELIB 43055 /* Linux-specific. */ 459161635Srwatson#define AUE_GETRESUID 43056 460161635Srwatson#define AUE_SETRESUID 43057 461161635Srwatson#define AUE_GETRESGID 43058 462161635Srwatson#define AUE_SETRESGID 43059 463161635Srwatson#define AUE_WAIT4 43060 /* FreeBSD-specific. */ 464161635Srwatson#define AUE_LGETFH 43061 /* FreeBSD-specific. */ 465161635Srwatson#define AUE_FHSTATFS 43062 /* FreeBSD-specific. */ 466161635Srwatson#define AUE_FHOPEN 43063 /* FreeBSD-specific. */ 467161635Srwatson#define AUE_FHSTAT 43064 /* FreeBSD-specific. */ 468161635Srwatson#define AUE_JAIL 43065 /* FreeBSD-specific. */ 469161635Srwatson#define AUE_EACCESS 43066 /* FreeBSD-specific. */ 470161635Srwatson#define AUE_KQUEUE 43067 /* FreeBSD-specific. */ 471161635Srwatson#define AUE_KEVENT 43068 /* FreeBSD-specific. */ 472161635Srwatson#define AUE_FSYNC 43069 473161635Srwatson#define AUE_NMOUNT 43070 /* FreeBSD-specific. */ 474161635Srwatson#define AUE_BDFLUSH 43071 /* Linux-specific. */ 475161635Srwatson#define AUE_SETFSUID 43072 /* Linux-specific. */ 476161635Srwatson#define AUE_SETFSGID 43073 /* Linux-specific. */ 477161635Srwatson#define AUE_PERSONALITY 43074 /* Linux-specific. */ 478161635Srwatson#define AUE_SCHED_GETSCHEDULER 43075 /* POSIX.1b. */ 479161635Srwatson#define AUE_SCHED_SETSCHEDULER 43076 /* POSIX.1b. */ 480161635Srwatson#define AUE_PRCTL 43077 /* Linux-specific. */ 481161635Srwatson#define AUE_GETCWD 43078 /* FreeBSD/Linux-specific. */ 482161635Srwatson#define AUE_CAPGET 43079 /* Linux-specific. */ 483161635Srwatson#define AUE_CAPSET 43080 /* Linux-specific. */ 484161635Srwatson#define AUE_PIVOT_ROOT 43081 /* Linux-specific. */ 485161635Srwatson#define AUE_RTPRIO 43082 /* FreeBSD-specific. */ 486161635Srwatson#define AUE_SCHED_GETPARAM 43083 /* POSIX.1b. */ 487161635Srwatson#define AUE_SCHED_SETPARAM 43084 /* POSIX.1b. */ 488161635Srwatson#define AUE_SCHED_GET_PRIORITY_MAX 43085 /* POSIX.1b. */ 489161635Srwatson#define AUE_SCHED_GET_PRIORITY_MIN 43086 /* POSIX.1b. */ 490161635Srwatson#define AUE_SCHED_RR_GET_INTERVAL 43087 /* POSIX.1b. */ 491161635Srwatson#define AUE_ACL_GET_FILE 43088 /* FreeBSD. */ 492161635Srwatson#define AUE_ACL_SET_FILE 43089 /* FreeBSD. */ 493161635Srwatson#define AUE_ACL_GET_FD 43090 /* FreeBSD. */ 494161635Srwatson#define AUE_ACL_SET_FD 43091 /* FreeBSD. */ 495161635Srwatson#define AUE_ACL_DELETE_FILE 43092 /* FreeBSD. */ 496161635Srwatson#define AUE_ACL_DELETE_FD 43093 /* FreeBSD. */ 497161635Srwatson#define AUE_ACL_CHECK_FILE 43094 /* FreeBSD. */ 498161635Srwatson#define AUE_ACL_CHECK_FD 43095 /* FreeBSD. */ 499161635Srwatson#define AUE_ACL_GET_LINK 43096 /* FreeBSD. */ 500161635Srwatson#define AUE_ACL_SET_LINK 43097 /* FreeBSD. */ 501161635Srwatson#define AUE_ACL_DELETE_LINK 43098 /* FreeBSD. */ 502161635Srwatson#define AUE_ACL_CHECK_LINK 43099 /* FreeBSD. */ 503161635Srwatson#define AUE_SYSARCH 43100 /* FreeBSD. */ 504161635Srwatson#define AUE_EXTATTRCTL 43101 /* FreeBSD. */ 505161635Srwatson#define AUE_EXTATTR_GET_FILE 43102 /* FreeBSD. */ 506161635Srwatson#define AUE_EXTATTR_SET_FILE 43103 /* FreeBSD. */ 507161635Srwatson#define AUE_EXTATTR_LIST_FILE 43104 /* FreeBSD. */ 508161635Srwatson#define AUE_EXTATTR_DELETE_FILE 43105 /* FreeBSD. */ 509161635Srwatson#define AUE_EXTATTR_GET_FD 43106 /* FreeBSD. */ 510161635Srwatson#define AUE_EXTATTR_SET_FD 43107 /* FreeBSD. */ 511161635Srwatson#define AUE_EXTATTR_LIST_FD 43108 /* FreeBSD. */ 512161635Srwatson#define AUE_EXTATTR_DELETE_FD 43109 /* FreeBSD. */ 513161635Srwatson#define AUE_EXTATTR_GET_LINK 43110 /* FreeBSD. */ 514161635Srwatson#define AUE_EXTATTR_SET_LINK 43111 /* FreeBSD. */ 515161635Srwatson#define AUE_EXTATTR_LIST_LINK 43112 /* FreeBSD. */ 516161635Srwatson#define AUE_EXTATTR_DELETE_LINK 43113 /* FreeBSD. */ 517162508Srwatson#define AUE_KENV 43114 /* FreeBSD. */ 518162508Srwatson#define AUE_JAIL_ATTACH 43115 /* FreeBSD. */ 519162508Srwatson#define AUE_SYSCTL_WRITE 43116 /* FreeBSD. */ 520162630Srwatson#define AUE_IOPERM 43117 /* Linux. */ 521162630Srwatson#define AUE_READDIR 43118 /* Linux. */ 522162630Srwatson#define AUE_IOPL 43119 /* Linux. */ 523162630Srwatson#define AUE_VM86 43120 /* Linux. */ 524185573Srwatson#define AUE_MAC_GET_PROC 43121 /* FreeBSD/Darwin. */ 525185573Srwatson#define AUE_MAC_SET_PROC 43122 /* FreeBSD/Darwin. */ 526185573Srwatson#define AUE_MAC_GET_FD 43123 /* FreeBSD/Darwin. */ 527185573Srwatson#define AUE_MAC_GET_FILE 43124 /* FreeBSD/Darwin. */ 528185573Srwatson#define AUE_MAC_SET_FD 43125 /* FreeBSD/Darwin. */ 529185573Srwatson#define AUE_MAC_SET_FILE 43126 /* FreeBSD/Darwin. */ 530168782Srwatson#define AUE_MAC_SYSCALL 43127 /* FreeBSD. */ 531185573Srwatson#define AUE_MAC_GET_PID 43128 /* FreeBSD/Darwin. */ 532185573Srwatson#define AUE_MAC_GET_LINK 43129 /* FreeBSD/Darwin. */ 533185573Srwatson#define AUE_MAC_SET_LINK 43130 /* FreeBSD/Darwin. */ 534185573Srwatson#define AUE_MAC_EXECVE 43131 /* FreeBSD/Darwin. */ 535168782Srwatson#define AUE_GETPATH_FROMFD 43132 /* FreeBSD. */ 536168782Srwatson#define AUE_GETPATH_FROMADDR 43133 /* FreeBSD. */ 537168782Srwatson#define AUE_MQ_OPEN 43134 /* FreeBSD. */ 538168782Srwatson#define AUE_MQ_SETATTR 43135 /* FreeBSD. */ 539168782Srwatson#define AUE_MQ_TIMEDRECEIVE 43136 /* FreeBSD. */ 540168782Srwatson#define AUE_MQ_TIMEDSEND 43137 /* FreeBSD. */ 541168782Srwatson#define AUE_MQ_NOTIFY 43138 /* FreeBSD. */ 542168782Srwatson#define AUE_MQ_UNLINK 43139 /* FreeBSD. */ 543168782Srwatson#define AUE_LISTEN 43140 /* FreeBSD/Darwin/Linux. */ 544168782Srwatson#define AUE_MLOCKALL 43141 /* FreeBSD. */ 545168782Srwatson#define AUE_MUNLOCKALL 43142 /* FreeBSD. */ 546171542Srwatson#define AUE_CLOSEFROM 43143 /* FreeBSD. */ 547171542Srwatson#define AUE_FEXECVE 43144 /* FreeBSD. */ 548171542Srwatson#define AUE_FACCESSAT 43145 /* FreeBSD. */ 549171542Srwatson#define AUE_FCHMODAT 43146 /* FreeBSD. */ 550171542Srwatson#define AUE_LINKAT 43147 /* FreeBSD. */ 551171542Srwatson#define AUE_MKDIRAT 43148 /* FreeBSD. */ 552171542Srwatson#define AUE_MKFIFOAT 43149 /* FreeBSD. */ 553171542Srwatson#define AUE_MKNODAT 43150 /* FreeBSD. */ 554171542Srwatson#define AUE_READLINKAT 43151 /* FreeBSD. */ 555171542Srwatson#define AUE_SYMLINKAT 43152 /* FreeBSD. */ 556185573Srwatson#define AUE_MAC_GETFSSTAT 43153 /* Darwin. */ 557185573Srwatson#define AUE_MAC_GET_MOUNT 43154 /* Darwin. */ 558185573Srwatson#define AUE_MAC_GET_LCID 43155 /* Darwin. */ 559185573Srwatson#define AUE_MAC_GET_LCTX 43156 /* Darwin. */ 560185573Srwatson#define AUE_MAC_SET_LCTX 43157 /* Darwin. */ 561185573Srwatson#define AUE_MAC_MOUNT 43158 /* Darwin. */ 562185573Srwatson#define AUE_GETLCID 43159 /* Darwin. */ 563185573Srwatson#define AUE_SETLCID 43160 /* Darwin. */ 564185573Srwatson#define AUE_TASKNAMEFORPID 43161 /* Darwin. */ 565185573Srwatson#define AUE_ACCESS_EXTENDED 43162 /* Darwin. */ 566185573Srwatson#define AUE_CHMOD_EXTENDED 43163 /* Darwin. */ 567185573Srwatson#define AUE_FCHMOD_EXTENDED 43164 /* Darwin. */ 568186647Srwatson#define AUE_FSTAT_EXTENDED 43165 /* Darwin. */ 569185573Srwatson#define AUE_LSTAT_EXTENDED 43166 /* Darwin. */ 570185573Srwatson#define AUE_MKDIR_EXTENDED 43167 /* Darwin. */ 571185573Srwatson#define AUE_MKFIFO_EXTENDED 43168 /* Darwin. */ 572185573Srwatson#define AUE_OPEN_EXTENDED 43169 /* Darwin. */ 573185573Srwatson#define AUE_OPEN_EXTENDED_R 43170 /* Darwin. */ 574185573Srwatson#define AUE_OPEN_EXTENDED_RC 43171 /* Darwin. */ 575185573Srwatson#define AUE_OPEN_EXTENDED_RT 43172 /* Darwin. */ 576185573Srwatson#define AUE_OPEN_EXTENDED_RTC 43173 /* Darwin. */ 577185573Srwatson#define AUE_OPEN_EXTENDED_W 43174 /* Darwin. */ 578185573Srwatson#define AUE_OPEN_EXTENDED_WC 43175 /* Darwin. */ 579185573Srwatson#define AUE_OPEN_EXTENDED_WT 43176 /* Darwin. */ 580185573Srwatson#define AUE_OPEN_EXTENDED_WTC 43177 /* Darwin. */ 581185573Srwatson#define AUE_OPEN_EXTENDED_RW 43178 /* Darwin. */ 582185573Srwatson#define AUE_OPEN_EXTENDED_RWC 43179 /* Darwin. */ 583185573Srwatson#define AUE_OPEN_EXTENDED_RWT 43180 /* Darwin. */ 584185573Srwatson#define AUE_OPEN_EXTENDED_RWTC 43181 /* Darwin. */ 585185573Srwatson#define AUE_STAT_EXTENDED 43182 /* Darwin. */ 586185573Srwatson#define AUE_UMASK_EXTENDED 43183 /* Darwin. */ 587185573Srwatson#define AUE_OPENAT 43184 /* FreeBSD. */ 588182123Srwatson#define AUE_POSIX_OPENPT 43185 /* FreeBSD. */ 589185573Srwatson#define AUE_CAP_NEW 43186 /* TrustedBSD. */ 590247602Spjd#define AUE_CAP_RIGHTS_GET 43187 /* TrustedBSD. */ 591255219Spjd#define AUE_CAP_GETRIGHTS AUE_CAP_RIGHTS_GET 592185573Srwatson#define AUE_CAP_ENTER 43188 /* TrustedBSD. */ 593185573Srwatson#define AUE_CAP_GETMODE 43189 /* TrustedBSD. */ 594186647Srwatson#define AUE_POSIX_SPAWN 43190 /* Darwin. */ 595186647Srwatson#define AUE_FSGETPATH 43191 /* Darwin. */ 596189279Srwatson#define AUE_PREAD 43192 /* Darwin/FreeBSD. */ 597189279Srwatson#define AUE_PWRITE 43193 /* Darwin/FreeBSD. */ 598191270Srwatson#define AUE_FSCTL 43194 /* Darwin. */ 599191270Srwatson#define AUE_FFSCTL 43195 /* Darwin. */ 600195458Strasz#define AUE_LPATHCONF 43196 /* FreeBSD. */ 601197624Srwatson#define AUE_PDFORK 43197 /* FreeBSD. */ 602197624Srwatson#define AUE_PDKILL 43198 /* FreeBSD. */ 603197624Srwatson#define AUE_PDGETPID 43199 /* FreeBSD. */ 604197624Srwatson#define AUE_PDWAIT 43200 /* FreeBSD. */ 605242958Skib#define AUE_WAIT6 43201 /* FreeBSD. */ 606247602Spjd#define AUE_CAP_RIGHTS_LIMIT 43202 /* TrustedBSD. */ 607247602Spjd#define AUE_CAP_IOCTLS_LIMIT 43203 /* TrustedBSD. */ 608247602Spjd#define AUE_CAP_IOCTLS_GET 43204 /* TrustedBSD. */ 609247602Spjd#define AUE_CAP_FCNTLS_LIMIT 43205 /* TrustedBSD. */ 610247602Spjd#define AUE_CAP_FCNTLS_GET 43206 /* TrustedBSD. */ 611247667Spjd#define AUE_BINDAT 43207 /* TrustedBSD. */ 612247667Spjd#define AUE_CONNECTAT 43208 /* TrustedBSD. */ 613248599Spjd#define AUE_CHFLAGSAT 43209 /* FreeBSD-specific. */ 614161635Srwatson 615161635Srwatson/* 616155191Srwatson * Darwin BSM uses a number of AUE_O_* definitions, which are aliased to the 617155191Srwatson * normal Solaris BSM identifiers. _O_ refers to it being an old, or compat 618155191Srwatson * interface. In most cases, Darwin has never implemented these system calls 619155191Srwatson * but picked up the fields in their system call table from their FreeBSD 620155191Srwatson * import. Happily, these have different names than the AUE_O* definitions 621155191Srwatson * in Solaris BSM. 622155191Srwatson */ 623155191Srwatson#define AUE_O_CREAT AUE_OPEN_RWTC /* Darwin */ 624155191Srwatson#define AUE_O_EXECVE AUE_NULL /* Darwin */ 625155191Srwatson#define AUE_O_SBREAK AUE_NULL /* Darwin */ 626155191Srwatson#define AUE_O_LSEEK AUE_NULL /* Darwin */ 627155191Srwatson#define AUE_O_MOUNT AUE_NULL /* Darwin */ 628155191Srwatson#define AUE_O_UMOUNT AUE_NULL /* Darwin */ 629155191Srwatson#define AUE_O_STAT AUE_STAT /* Darwin */ 630155191Srwatson#define AUE_O_LSTAT AUE_LSTAT /* Darwin */ 631155191Srwatson#define AUE_O_FSTAT AUE_FSTAT /* Darwin */ 632155191Srwatson#define AUE_O_GETPAGESIZE AUE_NULL /* Darwin */ 633155191Srwatson#define AUE_O_VREAD AUE_NULL /* Darwin */ 634155191Srwatson#define AUE_O_VWRITE AUE_NULL /* Darwin */ 635155191Srwatson#define AUE_O_MMAP AUE_MMAP /* Darwin */ 636155191Srwatson#define AUE_O_VADVISE AUE_NULL /* Darwin */ 637155191Srwatson#define AUE_O_VHANGUP AUE_NULL /* Darwin */ 638155191Srwatson#define AUE_O_VLIMIT AUE_NULL /* Darwin */ 639155191Srwatson#define AUE_O_WAIT AUE_NULL /* Darwin */ 640155191Srwatson#define AUE_O_GETHOSTNAME AUE_NULL /* Darwin */ 641155191Srwatson#define AUE_O_SETHOSTNAME AUE_SYSCTL /* Darwin */ 642155191Srwatson#define AUE_O_GETDOPT AUE_NULL /* Darwin */ 643155191Srwatson#define AUE_O_SETDOPT AUE_NULL /* Darwin */ 644155191Srwatson#define AUE_O_ACCEPT AUE_NULL /* Darwin */ 645155191Srwatson#define AUE_O_SEND AUE_SENDMSG /* Darwin */ 646155191Srwatson#define AUE_O_RECV AUE_RECVMSG /* Darwin */ 647155191Srwatson#define AUE_O_VTIMES AUE_NULL /* Darwin */ 648155191Srwatson#define AUE_O_SIGVEC AUE_NULL /* Darwin */ 649155191Srwatson#define AUE_O_SIGBLOCK AUE_NULL /* Darwin */ 650155191Srwatson#define AUE_O_SIGSETMASK AUE_NULL /* Darwin */ 651155191Srwatson#define AUE_O_SIGSTACK AUE_NULL /* Darwin */ 652155191Srwatson#define AUE_O_RECVMSG AUE_RECVMSG /* Darwin */ 653155191Srwatson#define AUE_O_SENDMSG AUE_SENDMSG /* Darwin */ 654155191Srwatson#define AUE_O_VTRACE AUE_NULL /* Darwin */ 655155191Srwatson#define AUE_O_RESUBA AUE_NULL /* Darwin */ 656155191Srwatson#define AUE_O_RECVFROM AUE_RECVFROM /* Darwin */ 657155191Srwatson#define AUE_O_SETREUID AUE_SETREUID /* Darwin */ 658155191Srwatson#define AUE_O_SETREGID AUE_SETREGID /* Darwin */ 659155293Srwatson#define AUE_O_GETDIRENTRIES AUE_GETDIRENTRIES /* Darwin */ 660155191Srwatson#define AUE_O_TRUNCATE AUE_TRUNCATE /* Darwin */ 661155191Srwatson#define AUE_O_FTRUNCATE AUE_FTRUNCATE /* Darwin */ 662155191Srwatson#define AUE_O_GETPEERNAME AUE_NULL /* Darwin */ 663155191Srwatson#define AUE_O_GETHOSTID AUE_NULL /* Darwin */ 664155191Srwatson#define AUE_O_SETHOSTID AUE_NULL /* Darwin */ 665155191Srwatson#define AUE_O_GETRLIMIT AUE_NULL /* Darwin */ 666155191Srwatson#define AUE_O_SETRLIMIT AUE_SETRLIMIT /* Darwin */ 667155191Srwatson#define AUE_O_KILLPG AUE_KILL /* Darwin */ 668155191Srwatson#define AUE_O_SETQUOTA AUE_NULL /* Darwin */ 669155191Srwatson#define AUE_O_QUOTA AUE_NULL /* Darwin */ 670155191Srwatson#define AUE_O_GETSOCKNAME AUE_NULL /* Darwin */ 671155191Srwatson#define AUE_O_GETDIREENTRIES AUE_GETDIREENTRIES /* Darwin */ 672155191Srwatson#define AUE_O_ASYNCDAEMON AUE_NULL /* Darwin */ 673155191Srwatson#define AUE_O_GETDOMAINNAME AUE_NULL /* Darwin */ 674155191Srwatson#define AUE_O_SETDOMAINNAME AUE_SYSCTL /* Darwin */ 675155191Srwatson#define AUE_O_PCFS_MOUNT AUE_NULL /* Darwin */ 676155191Srwatson#define AUE_O_EXPORTFS AUE_NULL /* Darwin */ 677155191Srwatson#define AUE_O_USTATE AUE_NULL /* Darwin */ 678155191Srwatson#define AUE_O_WAIT3 AUE_NULL /* Darwin */ 679155191Srwatson#define AUE_O_RPAUSE AUE_NULL /* Darwin */ 680155191Srwatson#define AUE_O_GETDENTS AUE_NULL /* Darwin */ 681155191Srwatson 682155191Srwatson/* 683155191Srwatson * Possible desired future values based on review of BSD/Darwin system calls. 684155191Srwatson */ 685186647Srwatson#define AUE_ATGETMSG AUE_NULL 686186647Srwatson#define AUE_ATPUTMSG AUE_NULL 687186647Srwatson#define AUE_ATSOCKET AUE_NULL 688186647Srwatson#define AUE_ATPGETREQ AUE_NULL 689186647Srwatson#define AUE_ATPGETRSP AUE_NULL 690186647Srwatson#define AUE_ATPSNDREQ AUE_NULL 691186647Srwatson#define AUE_ATPSNDRSP AUE_NULL 692186647Srwatson#define AUE_BSDTHREADCREATE AUE_NULL 693186647Srwatson#define AUE_BSDTHREADTERMINATE AUE_NULL 694186647Srwatson#define AUE_BSDTHREADREGISTER AUE_NULL 695186647Srwatson#define AUE_CHUD AUE_NULL 696186647Srwatson#define AUE_CSOPS AUE_NULL 697155191Srwatson#define AUE_DUP AUE_NULL 698186647Srwatson#define AUE_FDATASYNC AUE_NULL 699186647Srwatson#define AUE_FGETATTRLIST AUE_NULL 700186647Srwatson#define AUE_FGETXATTR AUE_NULL 701186647Srwatson#define AUE_FLISTXATTR AUE_NULL 702186647Srwatson#define AUE_FREMOVEXATTR AUE_NULL 703186647Srwatson#define AUE_FSETATTRLIST AUE_NULL 704186647Srwatson#define AUE_FSETXATTR AUE_NULL 705186647Srwatson#define AUE_FSTATFS64 AUE_NULL 706155191Srwatson#define AUE_FSTATV AUE_NULL 707186647Srwatson#define AUE_FSTAT64 AUE_NULL 708189279Srwatson#define AUE_FSTAT64_EXTENDED AUE_NULL 709155191Srwatson#define AUE_GCCONTROL AUE_NULL 710186647Srwatson#define AUE_GETDIRENTRIES64 AUE_NULL 711155191Srwatson#define AUE_GETDTABLESIZE AUE_NULL 712155191Srwatson#define AUE_GETEGID AUE_NULL 713155191Srwatson#define AUE_GETEUID AUE_NULL 714186647Srwatson#define AUE_GETFSSTAT64 AUE_NULL 715155191Srwatson#define AUE_GETGID AUE_NULL 716155191Srwatson#define AUE_GETGROUPS AUE_NULL 717155191Srwatson#define AUE_GETITIMER AUE_NULL 718155191Srwatson#define AUE_GETLOGIN AUE_NULL 719155191Srwatson#define AUE_GETPEERNAME AUE_NULL 720155191Srwatson#define AUE_GETPGID AUE_NULL 721155191Srwatson#define AUE_GETPGRP AUE_NULL 722155191Srwatson#define AUE_GETPID AUE_NULL 723155191Srwatson#define AUE_GETPPID AUE_NULL 724155191Srwatson#define AUE_GETPRIORITY AUE_NULL 725155191Srwatson#define AUE_GETRLIMIT AUE_NULL 726155191Srwatson#define AUE_GETRUSAGE AUE_NULL 727186647Srwatson#define AUE_GETSGROUPS AUE_NULL 728155191Srwatson#define AUE_GETSID AUE_NULL 729155191Srwatson#define AUE_GETSOCKNAME AUE_NULL 730155191Srwatson#define AUE_GETTIMEOFDAY AUE_NULL 731186647Srwatson#define AUE_GETTID AUE_NULL 732155191Srwatson#define AUE_GETUID AUE_NULL 733155191Srwatson#define AUE_GETSOCKOPT AUE_NULL 734186647Srwatson#define AUE_GETWGROUPS AUE_NULL 735186647Srwatson#define AUE_GETXATTR AUE_NULL 736186647Srwatson#define AUE_IDENTITYSVC AUE_NULL 737186647Srwatson#define AUE_INITGROUPS AUE_NULL 738186647Srwatson#define AUE_IOPOLICYSYS AUE_NULL 739155191Srwatson#define AUE_ISSETUGID AUE_NULL 740186647Srwatson#define AUE_LIOLISTIO AUE_NULL 741186647Srwatson#define AUE_LISTXATTR AUE_NULL 742155191Srwatson#define AUE_LSTATV AUE_NULL 743186647Srwatson#define AUE_LSTAT64 AUE_NULL 744189279Srwatson#define AUE_LSTAT64_EXTENDED AUE_NULL 745155191Srwatson#define AUE_MADVISE AUE_NULL 746155191Srwatson#define AUE_MINCORE AUE_NULL 747155191Srwatson#define AUE_MKCOMPLEX AUE_NULL 748155191Srwatson#define AUE_MODWATCH AUE_NULL 749155191Srwatson#define AUE_MSGCL AUE_NULL 750155191Srwatson#define AUE_MSYNC AUE_NULL 751155293Srwatson#define AUE_PREADV AUE_NULL 752186647Srwatson#define AUE_PROCINFO AUE_NULL 753186647Srwatson#define AUE_PTHREADCANCELED AUE_NULL 754186647Srwatson#define AUE_PTHREADCHDIR AUE_NULL 755186647Srwatson#define AUE_PTHREADCONDBROADCAST AUE_NULL 756186647Srwatson#define AUE_PTHREADCONDDESTORY AUE_NULL 757186647Srwatson#define AUE_PTHREADCONDINIT AUE_NULL 758186647Srwatson#define AUE_PTHREADCONDSIGNAL AUE_NULL 759186647Srwatson#define AUE_PTHREADCONDWAIT AUE_NULL 760186647Srwatson#define AUE_PTHREADFCHDIR AUE_NULL 761186647Srwatson#define AUE_PTHREADMARK AUE_NULL 762186647Srwatson#define AUE_PTHREADMUTEXDESTROY AUE_NULL 763186647Srwatson#define AUE_PTHREADMUTEXINIT AUE_NULL 764186647Srwatson#define AUE_PTHREADMUTEXTRYLOCK AUE_NULL 765186647Srwatson#define AUE_PTHREADMUTEXUNLOCK AUE_NULL 766155293Srwatson#define AUE_PWRITEV AUE_NULL 767186647Srwatson#define AUE_REMOVEXATTR AUE_NULL 768155191Srwatson#define AUE_SBRK AUE_NULL 769155191Srwatson#define AUE_SELECT AUE_NULL 770155191Srwatson#define AUE_SEMDESTROY AUE_NULL 771155191Srwatson#define AUE_SEMGETVALUE AUE_NULL 772155191Srwatson#define AUE_SEMINIT AUE_NULL 773155191Srwatson#define AUE_SEMPOST AUE_NULL 774155191Srwatson#define AUE_SEMTRYWAIT AUE_NULL 775155191Srwatson#define AUE_SEMWAIT AUE_NULL 776186647Srwatson#define AUE_SEMWAITSIGNAL AUE_NULL 777155191Srwatson#define AUE_SETITIMER AUE_NULL 778186647Srwatson#define AUE_SETSGROUPS AUE_NULL 779186647Srwatson#define AUE_SETTID AUE_NULL 780186647Srwatson#define AUE_SETTIDWITHPID AUE_NULL 781186647Srwatson#define AUE_SETWGROUPS AUE_NULL 782186647Srwatson#define AUE_SETXATTR AUE_NULL 783186647Srwatson#define AUE_SHAREDREGIONCHECK AUE_NULL 784186647Srwatson#define AUE_SHAREDREGIONMAP AUE_NULL 785155191Srwatson#define AUE_SIGACTION AUE_NULL 786155191Srwatson#define AUE_SIGALTSTACK AUE_NULL 787155191Srwatson#define AUE_SIGPENDING AUE_NULL 788155191Srwatson#define AUE_SIGPROCMASK AUE_NULL 789155191Srwatson#define AUE_SIGRETURN AUE_NULL 790155191Srwatson#define AUE_SIGSUSPEND AUE_NULL 791155191Srwatson#define AUE_SIGWAIT AUE_NULL 792155191Srwatson#define AUE_SSTK AUE_NULL 793186647Srwatson#define AUE_STACKSNAPSHOT AUE_NULL 794186647Srwatson#define AUE_STATFS64 AUE_NULL 795155191Srwatson#define AUE_STATV AUE_NULL 796186647Srwatson#define AUE_STAT64 AUE_NULL 797189279Srwatson#define AUE_STAT64_EXTENDED AUE_NULL 798155191Srwatson#define AUE_SYNC AUE_NULL 799155191Srwatson#define AUE_SYSCALL AUE_NULL 800155191Srwatson#define AUE_TABLE AUE_NULL 801186647Srwatson#define AUE_VMPRESSUREMONITOR AUE_NULL 802155191Srwatson#define AUE_WAITEVENT AUE_NULL 803186647Srwatson#define AUE_WAITID AUE_NULL 804155191Srwatson#define AUE_WATCHEVENT AUE_NULL 805186647Srwatson#define AUE_WORKQOPEN AUE_NULL 806186647Srwatson#define AUE_WORKQOPS AUE_NULL 807155191Srwatson 808146760Srwatson#endif /* !_BSM_AUDIT_KEVENTS_H_ */ 809