1 0 stevel <?xml version="1.0" encoding="UTF-8" ?> 2 0 stevel 3 0 stevel <!-- 4 5344 tz204579 Copyright 2007 Sun Microsystems, Inc. All rights reserved. 5 0 stevel Use is subject to license terms. 6 0 stevel 7 0 stevel CDDL HEADER START 8 0 stevel 9 0 stevel The contents of this file are subject to the terms of the 10 1780 gww Common Development and Distribution License (the "License"). 11 1780 gww You may not use this file except in compliance with the License. 12 0 stevel 13 0 stevel You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 14 0 stevel or http://www.opensolaris.org/os/licensing. 15 0 stevel See the License for the specific language governing permissions 16 0 stevel and limitations under the License. 17 0 stevel 18 0 stevel When distributing Covered Code, include this CDDL HEADER in each 19 0 stevel file and include the License file at usr/src/OPENSOLARIS.LICENSE. 20 0 stevel If applicable, add the following below this CDDL HEADER, with the 21 0 stevel fields enclosed by brackets "[]" replaced with your own identifying 22 0 stevel information: Portions Copyright [yyyy] [name of copyright owner] 23 0 stevel 24 0 stevel CDDL HEADER END 25 0 stevel 26 0 stevel ident "%Z%%M% %I% %E% SMI" 27 0 stevel --> 28 0 stevel 29 0 stevel 30 0 stevel <!--Entity Definitions--> 31 0 stevel 32 0 stevel <!-- timeattr or iso8601 33 0 stevel 34 0 stevel timeattr: 35 0 stevel the time/date to the second in strftime(3C) default format, 36 0 stevel followed by milliseconds offset. 37 0 stevel 38 0 stevel Example: time="Mon May 06 12:10:18 2002" msec="750" 39 0 stevel 40 0 stevel iso8601: 41 0 stevel ISO 8601 standard format date time and timezone; 42 0 stevel YYYY-MM-DD HH:MM:SS.sss +/-HH:MM; year, month, day 24 hour time with 43 0 stevel milliseconds + or - offset from Universal Time (UTC, aka GMT) 44 0 stevel 45 0 stevel Example: iso8601="2003-09-17 16:47:41.831 -07:00" 46 0 stevel 47 0 stevel --> 48 0 stevel <!ENTITY % timeattr "time CDATA #IMPLIED 49 0 stevel msec CDATA #IMPLIED"> 50 0 stevel 51 0 stevel <!ENTITY % iso8601 "iso8601 CDATA #IMPLIED"> 52 0 stevel 53 0 stevel <!-- xinfo Generic info for X related tokens. --> 54 0 stevel <!ENTITY % xinfo "xid CDATA #REQUIRED 55 0 stevel xcreator-uid CDATA #REQUIRED"> 56 0 stevel 57 0 stevel <!-- reserved_toks 58 0 stevel 59 0 stevel This represents the set of "reserved" tokens whose placement is 60 0 stevel fixed. 61 0 stevel 62 0 stevel --> 63 0 stevel <!ENTITY % reserved_toks "( 64 0 stevel file | 65 0 stevel record | 66 0 stevel host | 67 0 stevel sequence 68 0 stevel ) 69 0 stevel "> 70 0 stevel 71 0 stevel <!-- normaltoks 72 0 stevel 73 0 stevel This represents the set of all tokens other than the "reserved" 74 0 stevel tokens. 75 0 stevel 76 0 stevel --> 77 0 stevel <!ENTITY % normaltoks "( 78 0 stevel acl | 79 0 stevel arbitrary | 80 0 stevel argument | 81 0 stevel attribute | 82 0 stevel cmd | 83 0 stevel exit | 84 0 stevel exec_args | 85 0 stevel exec_env | 86 1780 gww fmri | 87 0 stevel group | 88 0 stevel ip | 89 0 stevel ip_address | 90 0 stevel IPC | 91 0 stevel IPC_perm | 92 0 stevel ip_port | 93 0 stevel liaison | 94 0 stevel opaque | 95 0 stevel path | 96 0 stevel path_attr | 97 0 stevel privilege | 98 0 stevel process | 99 0 stevel return | 100 0 stevel sensitivity_label | 101 0 stevel old_socket | 102 0 stevel socket | 103 0 stevel subject | 104 0 stevel text | 105 0 stevel use_of_authorization | 106 0 stevel use_of_privilege | 107 0 stevel X_atom | 108 0 stevel X_client | 109 0 stevel X_color_map | 110 0 stevel X_cursor | 111 0 stevel X_font | 112 0 stevel X_graphic_context | 113 0 stevel X_pixmap | 114 0 stevel X_property | 115 0 stevel X_selection | 116 0 stevel X_window | 117 0 stevel zone 118 0 stevel ) 119 0 stevel "> 120 0 stevel 121 0 stevel <!--Element Definitions--> 122 0 stevel 123 0 stevel <!-- 124 0 stevel 125 0 stevel The main element, "audit", consists of a sequence of file & record tokens. 126 0 stevel 127 0 stevel --> 128 0 stevel <!ELEMENT audit (file | record)*> 129 0 stevel 130 0 stevel <!-- file token --> 131 0 stevel <!ELEMENT file (#PCDATA)> 132 0 stevel <!ATTLIST file %iso8601;> 133 0 stevel 134 0 stevel 135 0 stevel <!-- record token 136 0 stevel 137 0 stevel Audit records will have this general layout of tokens after the 138 0 stevel first token (which is the record token): 139 0 stevel (tokens),subject,group,(tokens),return,sequence,host 140 0 stevel 141 2425 gww (all tokens after the record token are optional; the host token is unused.) 142 0 stevel 143 0 stevel --> 144 0 stevel <!ELEMENT record ( 145 0 stevel (%normaltoks;)*, 146 0 stevel sequence?, 147 0 stevel host? 148 0 stevel ) 149 0 stevel > 150 0 stevel <!ATTLIST record 151 0 stevel version CDATA #REQUIRED 152 0 stevel event CDATA #REQUIRED 153 0 stevel modifier CDATA #IMPLIED 154 0 stevel host CDATA #IMPLIED 155 0 stevel %iso8601; 156 0 stevel > 157 0 stevel 158 0 stevel <!-- text token --> 159 0 stevel <!ELEMENT text (#PCDATA)> 160 0 stevel 161 0 stevel <!-- path token --> 162 0 stevel <!ELEMENT path (#PCDATA)> 163 0 stevel 164 0 stevel <!-- path_attr token --> 165 0 stevel <!ELEMENT path_attr (xattr*)> 166 0 stevel <!ELEMENT xattr (#PCDATA)> 167 0 stevel 168 0 stevel <!-- host token --> 169 0 stevel <!ELEMENT host (#PCDATA)> 170 0 stevel 171 0 stevel <!-- subject token --> 172 0 stevel <!ELEMENT subject EMPTY> 173 0 stevel <!ATTLIST subject 174 0 stevel audit-uid CDATA #REQUIRED 175 0 stevel uid CDATA #REQUIRED 176 0 stevel gid CDATA #REQUIRED 177 0 stevel ruid CDATA #REQUIRED 178 0 stevel rgid CDATA #REQUIRED 179 0 stevel pid CDATA #REQUIRED 180 0 stevel sid CDATA #REQUIRED 181 0 stevel tid CDATA #REQUIRED 182 0 stevel > 183 0 stevel 184 0 stevel <!-- process token --> 185 0 stevel <!ELEMENT process EMPTY> 186 0 stevel <!ATTLIST process 187 0 stevel audit-uid CDATA #REQUIRED 188 0 stevel uid CDATA #REQUIRED 189 0 stevel gid CDATA #REQUIRED 190 0 stevel ruid CDATA #REQUIRED 191 0 stevel rgid CDATA #REQUIRED 192 0 stevel pid CDATA #REQUIRED 193 0 stevel sid CDATA #REQUIRED 194 0 stevel tid CDATA #REQUIRED 195 0 stevel > 196 0 stevel 197 0 stevel <!-- return token --> 198 0 stevel <!ELEMENT return EMPTY> 199 0 stevel <!ATTLIST return 200 0 stevel errval CDATA #REQUIRED 201 0 stevel retval CDATA #REQUIRED 202 0 stevel > 203 0 stevel 204 0 stevel <!-- exit token --> 205 0 stevel <!ELEMENT exit EMPTY> 206 0 stevel <!ATTLIST exit 207 0 stevel errval CDATA #REQUIRED 208 0 stevel retval CDATA #REQUIRED 209 0 stevel > 210 0 stevel 211 0 stevel <!-- sequence token --> 212 0 stevel <!ELEMENT sequence EMPTY> 213 0 stevel <!ATTLIST sequence 214 0 stevel seq-num CDATA #REQUIRED 215 0 stevel > 216 1780 gww 217 1780 gww <!-- fmri token --> 218 1780 gww <!ELEMENT fmri (#PCDATA)> 219 0 stevel 220 0 stevel <!-- group token --> 221 0 stevel <!ELEMENT group (gid)*> 222 0 stevel <!ELEMENT gid (#PCDATA)> 223 0 stevel 224 0 stevel <!-- opaque token --> 225 0 stevel <!ELEMENT opaque (#PCDATA)> 226 0 stevel 227 0 stevel <!-- liaison token --> 228 0 stevel <!-- (NOTE: liaison is obsolete and is no longer generated --> 229 0 stevel <!ELEMENT liaison (#PCDATA)> 230 0 stevel 231 0 stevel <!-- argument token --> 232 0 stevel <!ELEMENT argument EMPTY> 233 0 stevel <!ATTLIST argument 234 0 stevel arg-num CDATA #REQUIRED 235 0 stevel value CDATA #REQUIRED 236 0 stevel desc CDATA #REQUIRED 237 0 stevel > 238 0 stevel 239 0 stevel <!-- attribute token --> 240 0 stevel <!ELEMENT attribute EMPTY> 241 0 stevel <!ATTLIST attribute 242 0 stevel mode CDATA #REQUIRED 243 0 stevel uid CDATA #REQUIRED 244 0 stevel gid CDATA #REQUIRED 245 0 stevel fsid CDATA #REQUIRED 246 0 stevel nodeid CDATA #REQUIRED 247 0 stevel device CDATA #REQUIRED 248 0 stevel > 249 0 stevel 250 0 stevel <!-- cmd token --> 251 0 stevel <!ELEMENT cmd (argv*, arge*)> 252 0 stevel <!ELEMENT argv (#PCDATA)> 253 0 stevel <!ELEMENT arge (#PCDATA)> 254 0 stevel 255 0 stevel <!-- exec_args token --> 256 0 stevel <!ELEMENT exec_args (arg*)> 257 0 stevel <!ELEMENT arg (#PCDATA)> 258 0 stevel 259 0 stevel <!-- exec_env token --> 260 0 stevel <!ELEMENT exec_env (env*)> 261 0 stevel <!ELEMENT env (#PCDATA)> 262 0 stevel 263 0 stevel <!-- arbitrary token --> 264 0 stevel <!ELEMENT arbitrary (#PCDATA)> 265 0 stevel <!ATTLIST arbitrary 266 0 stevel print CDATA #REQUIRED 267 0 stevel type CDATA #REQUIRED 268 0 stevel count CDATA #REQUIRED 269 0 stevel > 270 0 stevel 271 0 stevel <!-- privilege token --> 272 0 stevel <!ELEMENT privilege (#PCDATA)> 273 0 stevel <!ATTLIST privilege 274 0 stevel set-type CDATA #REQUIRED 275 0 stevel > 276 0 stevel 277 0 stevel <!-- use_of_privilege token --> 278 0 stevel <!ELEMENT use_of_privilege (#PCDATA)> 279 0 stevel <!ATTLIST use_of_privilege 280 0 stevel result CDATA #REQUIRED 281 0 stevel > 282 0 stevel 283 0 stevel <!-- sensitivity_label token --> 284 0 stevel <!ELEMENT sensitivity_label (#PCDATA)> 285 0 stevel 286 0 stevel <!-- use_of_authorization token --> 287 0 stevel <!ELEMENT use_of_authorization (#PCDATA)> 288 0 stevel 289 0 stevel <!-- IPC token --> 290 0 stevel <!ELEMENT IPC EMPTY> 291 0 stevel <!ATTLIST IPC 292 0 stevel ipc-type CDATA #REQUIRED 293 0 stevel ipc-id CDATA #REQUIRED 294 0 stevel > 295 0 stevel 296 0 stevel <!-- IPC_perm token --> 297 0 stevel <!ELEMENT IPC_perm EMPTY> 298 0 stevel <!ATTLIST IPC_perm 299 0 stevel uid CDATA #REQUIRED 300 0 stevel gid CDATA #REQUIRED 301 0 stevel creator-uid CDATA #REQUIRED 302 0 stevel creator-gid CDATA #REQUIRED 303 0 stevel mode CDATA #REQUIRED 304 0 stevel seq CDATA #REQUIRED 305 0 stevel key CDATA #REQUIRED 306 0 stevel > 307 0 stevel 308 0 stevel <!-- ip_address token --> 309 0 stevel <!ELEMENT ip_address (#PCDATA)> 310 0 stevel 311 0 stevel <!-- ip_port token --> 312 0 stevel <!-- (NOTE: ip_port is obsolete and is no longer generated --> 313 0 stevel <!ELEMENT ip_port (#PCDATA)> 314 0 stevel 315 0 stevel <!-- ip token --> 316 0 stevel <!-- (NOTE: ip is obsolete and is no longer generated --> 317 0 stevel <!ELEMENT ip EMPTY> 318 0 stevel <!ATTLIST ip 319 0 stevel version CDATA #REQUIRED 320 0 stevel service_type CDATA #REQUIRED 321 0 stevel len CDATA #REQUIRED 322 0 stevel id CDATA #REQUIRED 323 0 stevel offset CDATA #REQUIRED 324 0 stevel time_to_live CDATA #REQUIRED 325 0 stevel protocol CDATA #REQUIRED 326 0 stevel cksum CDATA #REQUIRED 327 0 stevel src_addr CDATA #REQUIRED 328 0 stevel dest_addr CDATA #REQUIRED 329 0 stevel > 330 0 stevel 331 0 stevel <!-- old_socket token --> 332 0 stevel <!ELEMENT old_socket EMPTY> 333 0 stevel <!ATTLIST old_socket 334 0 stevel type CDATA #REQUIRED 335 0 stevel port CDATA #REQUIRED 336 0 stevel addr CDATA #REQUIRED 337 0 stevel > 338 0 stevel 339 0 stevel <!-- socket token --> 340 0 stevel <!ELEMENT socket EMPTY> 341 0 stevel <!ATTLIST socket 342 0 stevel sock_domain CDATA #REQUIRED 343 0 stevel sock_type CDATA #REQUIRED 344 0 stevel lport CDATA #REQUIRED 345 0 stevel laddr CDATA #REQUIRED 346 0 stevel fport CDATA #REQUIRED 347 0 stevel faddr CDATA #REQUIRED 348 0 stevel > 349 0 stevel 350 0 stevel <!-- acl token --> 351 0 stevel <!ELEMENT acl EMPTY> 352 0 stevel <!ATTLIST acl 353 5344 tz204579 type CDATA #IMPLIED 354 5344 tz204579 value CDATA #IMPLIED 355 5344 tz204579 mode CDATA #IMPLIED 356 5344 tz204579 flags CDATA #IMPLIED 357 5344 tz204579 id CDATA #IMPLIED 358 5344 tz204579 access_mask CDATA #IMPLIED 359 0 stevel > 360 0 stevel 361 0 stevel <!-- tid token --> 362 0 stevel <!-- future intent: contain one of ipadr | MTUadr | device --> 363 0 stevel <!ELEMENT tid (ipadr*)> 364 0 stevel <!ATTLIST tid 365 0 stevel type CDATA #REQUIRED 366 0 stevel > 367 0 stevel 368 0 stevel <!-- ipadr content of tid token --> 369 0 stevel <!ELEMENT ipadr EMPTY> 370 0 stevel <!ATTLIST ipadr 371 0 stevel local-port CDATA #REQUIRED 372 0 stevel remote-port CDATA #REQUIRED 373 0 stevel host CDATA #REQUIRED 374 0 stevel > 375 0 stevel 376 0 stevel <!-- X_atom token --> 377 0 stevel <!ELEMENT X_atom (#PCDATA)> 378 0 stevel 379 0 stevel <!-- X_color_map token --> 380 0 stevel <!ELEMENT X_color_map EMPTY> 381 0 stevel <!ATTLIST X_color_map %xinfo;> 382 0 stevel 383 0 stevel <!-- X_cursor token --> 384 0 stevel <!ELEMENT X_cursor EMPTY> 385 0 stevel <!ATTLIST X_cursor %xinfo;> 386 0 stevel 387 0 stevel <!-- X_font token --> 388 0 stevel <!ELEMENT X_font EMPTY> 389 0 stevel <!ATTLIST X_font %xinfo;> 390 0 stevel 391 0 stevel <!-- X_graphic_context token --> 392 0 stevel <!ELEMENT X_graphic_context EMPTY> 393 0 stevel <!ATTLIST X_graphic_context %xinfo;> 394 0 stevel 395 0 stevel <!-- X_pixmap token --> 396 0 stevel <!ELEMENT X_pixmap EMPTY> 397 0 stevel <!ATTLIST X_pixmap %xinfo;> 398 0 stevel 399 0 stevel <!-- X_window token --> 400 0 stevel <!ELEMENT X_window EMPTY> 401 0 stevel <!ATTLIST X_window %xinfo;> 402 0 stevel 403 0 stevel <!-- X_property token --> 404 0 stevel <!ELEMENT X_property (#PCDATA)> 405 0 stevel <!ATTLIST X_property %xinfo;> 406 0 stevel 407 0 stevel <!-- X_client token --> 408 0 stevel <!ELEMENT X_client (#PCDATA)> 409 0 stevel 410 0 stevel <!-- X_selection token --> 411 0 stevel <!ELEMENT X_selection (xsel_text, xsel_type, xsel_data)> 412 0 stevel <!ELEMENT x_sel_text (#PCDATA)> 413 0 stevel <!ELEMENT x_sel_type (#PCDATA)> 414 0 stevel <!ELEMENT x_sel_data (#PCDATA)> 415 0 stevel 416 0 stevel <!-- zonename token --> 417 0 stevel <!ELEMENT zone EMPTY> 418 0 stevel <!ATTLIST zone 419 0 stevel name CDATA #REQUIRED 420 0 stevel > 421
Indexes created Wed Nov 25 06:54:36 UTC 2009
Terms of Use |
Privacy |
Trademarks |
Copyright Policy |
Site Guidelines |
Help
Your use of this web site or any of its content or software indicates your agreement to be bound by these Terms of Use.
Copyright © 1995-2008 Sun Microsystems, Inc.