#include <bsm/audit_uevents.h>
BSD / POSIX › Audit (BSM)

bsm/audit_uevents.h

90 macros

macroAUE_at_create

Solaris userspace events.
#define AUE_at_create 6144

macroAUE_at_delete

#define AUE_at_delete 6145

macroAUE_at_perm

#define AUE_at_perm 6146

macroAUE_cron_invoke

#define AUE_cron_invoke 6147

macroAUE_crontab_create

#define AUE_crontab_create 6148

macroAUE_crontab_delete

#define AUE_crontab_delete 6149

macroAUE_crontab_perm

#define AUE_crontab_perm 6150

macroAUE_inetd_connect

#define AUE_inetd_connect 6151

macroAUE_login

#define AUE_login 6152

macroAUE_logout

#define AUE_logout 6153

macroAUE_telnet

#define AUE_telnet 6154

macroAUE_rlogin

#define AUE_rlogin 6155

macroAUE_mountd_mount

#define AUE_mountd_mount 6156

macroAUE_mountd_umount

#define AUE_mountd_umount 6157

macroAUE_rshd

#define AUE_rshd 6158

macroAUE_su

#define AUE_su 6159

macroAUE_halt

#define AUE_halt 6160

macroAUE_reboot

#define AUE_reboot 6161

macroAUE_rexecd

#define AUE_rexecd 6162

macroAUE_passwd

#define AUE_passwd 6163

macroAUE_rexd

#define AUE_rexd 6164

macroAUE_ftpd

#define AUE_ftpd 6165

macroAUE_init

#define AUE_init 6166

macroAUE_uadmin

#define AUE_uadmin 6167

macroAUE_shutdown

#define AUE_shutdown 6168

macroAUE_poweroff

#define AUE_poweroff 6169

macroAUE_crontab_mod

#define AUE_crontab_mod 6170

macroAUE_ftpd_logout

#define AUE_ftpd_logout 6171

macroAUE_ssh

#define AUE_ssh 6172

macroAUE_role_login

#define AUE_role_login 6173

macroAUE_prof_cmd

#define AUE_prof_cmd 6180

macroAUE_filesystem_add

#define AUE_filesystem_add 6181

macroAUE_filesystem_delete

#define AUE_filesystem_delete 6182

macroAUE_filesystem_modify

#define AUE_filesystem_modify 6183

macroAUE_allocate_succ

#define AUE_allocate_succ 6200

macroAUE_allocate_fail

#define AUE_allocate_fail 6201

macroAUE_deallocate_succ

#define AUE_deallocate_succ 6202

macroAUE_deallocate_fail

#define AUE_deallocate_fail 6203

macroAUE_listdevice_succ

#define AUE_listdevice_succ 6205

macroAUE_listdevice_fail

#define AUE_listdevice_fail 6206

macroAUE_create_user

#define AUE_create_user 6207

macroAUE_modify_user

#define AUE_modify_user 6208

macroAUE_delete_user

#define AUE_delete_user 6209

macroAUE_disable_user

#define AUE_disable_user 6210

macroAUE_enable_user

#define AUE_enable_user 6211

macroAUE_newgrp_login

#define AUE_newgrp_login 6212

macroAUE_admin_authentication

#define AUE_admin_authentication 6213

macroAUE_kadmind_auth

#define AUE_kadmind_auth 6214

macroAUE_kadmind_unauth

#define AUE_kadmind_unauth 6215

macroAUE_krb5kdc_as_req

#define AUE_krb5kdc_as_req 6216

macroAUE_krb5kdc_tgs_req

#define AUE_krb5kdc_tgs_req 6217

macroAUE_krb5kdc_tgs_req_2ndtktmm

#define AUE_krb5kdc_tgs_req_2ndtktmm 6218

macroAUE_krb5kdc_tgs_req_alt_tgt

#define AUE_krb5kdc_tgs_req_alt_tgt 6219

macroAUE_DARWIN_audit_startup

Historic Darwin use of the low event numbering space, which collided with the Solaris event space. Now obsoleted and new, higher, event numbers assigned to make it easier to interpret Solaris events using the OpenBSM tools.
#define AUE_DARWIN_audit_startup 6171

macroAUE_DARWIN_audit_shutdown

#define AUE_DARWIN_audit_shutdown 6172

macroAUE_DARWIN_sudo

#define AUE_DARWIN_sudo 6300

macroAUE_DARWIN_modify_password

#define AUE_DARWIN_modify_password 6501

macroAUE_DARWIN_create_group

#define AUE_DARWIN_create_group 6511

macroAUE_DARWIN_delete_group

#define AUE_DARWIN_delete_group 6512

macroAUE_DARWIN_modify_group

#define AUE_DARWIN_modify_group 6513

macroAUE_DARWIN_add_to_group

#define AUE_DARWIN_add_to_group 6514

macroAUE_DARWIN_remove_from_group

#define AUE_DARWIN_remove_from_group 6515

macroAUE_DARWIN_revoke_obj

#define AUE_DARWIN_revoke_obj 6521

macroAUE_DARWIN_lw_login

#define AUE_DARWIN_lw_login 6600

macroAUE_DARWIN_lw_logout

#define AUE_DARWIN_lw_logout 6601

macroAUE_DARWIN_auth_user

#define AUE_DARWIN_auth_user 7000

macroAUE_DARWIN_ssconn

#define AUE_DARWIN_ssconn 7001

macroAUE_DARWIN_ssauthorize

#define AUE_DARWIN_ssauthorize 7002

macroAUE_DARWIN_ssauthint

#define AUE_DARWIN_ssauthint 7003

macroAUE_openssh

Historic/third-party appliation allocations of event idenfiers.
#define AUE_openssh 32800

macroAUE_audit_startup

OpenBSM-managed application event space.
#define AUE_audit_startup 45000
Darwin-specific.

macroAUE_audit_shutdown

#define AUE_audit_shutdown 45001
Darwin-specific.

macroAUE_modify_password

#define AUE_modify_password 45014
Darwin-specific.

macroAUE_create_group

#define AUE_create_group 45015
Darwin-specific.

macroAUE_delete_group

#define AUE_delete_group 45016
Darwin-specific.

macroAUE_modify_group

#define AUE_modify_group 45017
Darwin-specific.

macroAUE_add_to_group

#define AUE_add_to_group 45018
Darwin-specific.

macroAUE_remove_from_group

#define AUE_remove_from_group 45019
Darwin-specific.

macroAUE_revoke_obj

#define AUE_revoke_obj 45020
Darwin-specific.

macroAUE_lw_login

#define AUE_lw_login 45021
Darwin-specific.

macroAUE_lw_logout

#define AUE_lw_logout 45022
Darwin-specific.

macroAUE_auth_user

#define AUE_auth_user 45023
Darwin-specific.

macroAUE_ssconn

#define AUE_ssconn 45024
Darwin-specific.

macroAUE_ssauthorize

#define AUE_ssauthorize 45025
Darwin-specific.

macroAUE_ssauthint

#define AUE_ssauthint 45026
Darwin-specific.

macroAUE_calife

#define AUE_calife 45027
OpenBSM-allocated.

macroAUE_sudo

#define AUE_sudo 45028
OpenBSM-allocated.

macroAUE_audit_recovery

#define AUE_audit_recovery 45029
OpenBSM-allocated.

macroAUE_ssauthmech

#define AUE_ssauthmech 45030
Darwin-specific.

macroAUE_sec_assessment

#define AUE_sec_assessment 45031
Darwin-specific.