1 0 stevel # 2 1676 jpk # Copyright 2006 Sun Microsystems, Inc. All rights reserved. 3 0 stevel # Use is subject to license terms. 4 0 stevel # 5 0 stevel # CDDL HEADER START 6 0 stevel # 7 0 stevel # The contents of this file are subject to the terms of the 8 1676 jpk # Common Development and Distribution License (the "License"). 9 1676 jpk # You may not use this file except in compliance with the License. 10 0 stevel # 11 0 stevel # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 12 0 stevel # or http://www.opensolaris.org/os/licensing. 13 0 stevel # See the License for the specific language governing permissions 14 0 stevel # and limitations under the License. 15 0 stevel # 16 0 stevel # When distributing Covered Code, include this CDDL HEADER in each 17 0 stevel # file and include the License file at usr/src/OPENSOLARIS.LICENSE. 18 0 stevel # If applicable, add the following below this CDDL HEADER, with the 19 0 stevel # fields enclosed by brackets "[]" replaced with your own identifying 20 0 stevel # information: Portions Copyright [yyyy] [name of copyright owner] 21 0 stevel # 22 0 stevel # CDDL HEADER END 23 0 stevel # 24 0 stevel # ident "%Z%%M% %I% %E% SMI" 25 0 stevel # 26 0 stevel # User Level Class Masks 27 0 stevel # 28 0 stevel # Developers: If you change this file you must also edit audit.h. 29 0 stevel # 30 0 stevel # "Meta-classes" can be created; these are supersets composed of multiple base 31 0 stevel # classes, and thus will have more than 1 bit in its mask. See "ad", "all", 32 0 stevel # "am", and "pc" below for examples. 33 0 stevel # 34 0 stevel # The "no" (invalid) class below is commonly (but not exclusively) used in 35 0 stevel # audit_event for obsolete events. 36 0 stevel # 37 0 stevel # 38 0 stevel # File Format: 39 0 stevel # 40 0 stevel # mask:name:description 41 0 stevel # 42 0 stevel 0x00000000:no:invalid class 43 0 stevel 0x00000001:fr:file read 44 0 stevel 0x00000002:fw:file write 45 0 stevel 0x00000004:fa:file attribute access 46 0 stevel 0x00000008:fm:file attribute modify 47 0 stevel 0x00000010:fc:file create 48 0 stevel 0x00000020:fd:file delete 49 0 stevel 0x00000040:cl:file close 50 0 stevel 0x00000100:nt:network 51 0 stevel 0x00000200:ip:ipc 52 0 stevel 0x00000400:na:non-attribute 53 0 stevel 0x00001000:lo:login or logout 54 0 stevel 0x00004000:ap:application 55 3147 xc151355 0x00008000:cy:cryptographic 56 0 stevel 0x00010000:ss:change system state 57 0 stevel 0x00020000:as:system-wide administration 58 0 stevel 0x00040000:ua:user administration 59 0 stevel 0x00070000:am:administrative (meta-class) 60 0 stevel 0x00080000:aa:audit utilization 61 0 stevel 0x000f0000:ad:old administrative (meta-class) 62 0 stevel 0x00100000:ps:process start/stop 63 0 stevel 0x00200000:pm:process modify 64 0 stevel 0x00300000:pc:process (meta-class) 65 1676 jpk 0x00400000:xp:X - privileged/administrative operations 66 1676 jpk 0x00800000:xc:X - object create/destroy 67 1676 jpk 0x01000000:xs:X - operations that always silently fail, if bad 68 1676 jpk 0x01c00000:xx:X - all X events (meta-class) 69 0 stevel 0x20000000:io:ioctl 70 0 stevel 0x40000000:ex:exec 71 0 stevel 0x80000000:ot:other 72 0 stevel 0xffffffff:all:all classes (meta-class) 73