1 /* 2 * Copyright (c) 2004 Apple Computer, Inc. 3 * All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that the following conditions 7 * are met: 8 * 1. Redistributions of source code must retain the above copyright 9 * notice, this list of conditions and the following disclaimer. 10 * 2. Redistributions in binary form must reproduce the above copyright 11 * notice, this list of conditions and the following disclaimer in the 12 * documentation and/or other materials provided with the distribution. 13 * 3. Neither the name of Apple Computer, Inc. ("Apple") nor the names of 14 * its contributors may be used to endorse or promote products derived 15 * from this software without specific prior written permission. 16 * 17 * THIS SOFTWARE IS PROVIDED BY APPLE AND ITS CONTRIBUTORS "AS IS" AND 18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 20 * ARE DISCLAIMED. IN NO EVENT SHALL APPLE OR ITS CONTRIBUTORS BE LIABLE FOR 21 * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 25 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING 26 * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 27 * POSSIBILITY OF SUCH DAMAGE. 28 * 29 * $P4: //depot/projects/trustedbsd/openbsm/bsm/audit_uevents.h#7 $ 30 */ 31 32 #ifndef _BSM_AUDIT_UEVENTS_H_ 33 #define _BSM_AUDIT_UEVENTS_H_ 34 35 /*- 36 * User level audit event numbers 37 * 38 * Range of audit event numbers: 39 * 0 Reserved, invalid 40 * 1 - 2047 Reserved for kernel events 41 * 2048 - 32767 Defined by BSM for user events 42 * 32768 - 36864 Reserved for Mac OS-X applications 43 * 36865 - 65535 Reserved for applications 44 * 45 */ 46 #define AUE_at_create 6144 47 #define AUE_at_delete 6145 48 #define AUE_at_perm 6146 49 #define AUE_cron_invoke 6147 50 #define AUE_crontab_create 6148 51 #define AUE_crontab_delete 6149 52 #define AUE_crontab_perm 6150 53 #define AUE_inetd_connect 6151 54 #define AUE_login 6152 55 #define AUE_logout 6153 56 #define AUE_telnet 6154 57 #define AUE_rlogin 6155 58 #define AUE_mountd_mount 6156 59 #define AUE_mountd_umount 6157 60 #define AUE_rshd 6158 61 #define AUE_su 6159 62 #define AUE_halt 6160 63 #define AUE_reboot 6161 64 #define AUE_rexecd 6162 65 #define AUE_passwd 6163 66 #define AUE_rexd 6164 67 #define AUE_ftpd 6165 68 #define AUE_init 6166 69 #define AUE_uadmin 6167 70 #define AUE_shutdown 6168 71 #define AUE_poweroff 6169 72 #define AUE_crontab_mod 6170 73 #define AUE_audit_startup 6171 74 #define AUE_audit_shutdown 6172 75 #define AUE_allocate_succ 6200 76 #define AUE_allocate_fail 6201 77 #define AUE_deallocate_succ 6202 78 #define AUE_deallocate_fail 6203 79 #define AUE_listdevice_succ 6205 80 #define AUE_listdevice_fail 6206 81 #define AUE_create_user 6207 82 #define AUE_modify_user 6208 83 #define AUE_delete_user 6209 84 #define AUE_disable_user 6210 85 #define AUE_enable_user 6211 86 #define AUE_sudo 6300 87 #define AUE_modify_password 6501 /* Not assigned by Sun. */ 88 #define AUE_create_group 6511 /* Not assigned by Sun. */ 89 #define AUE_delete_group 6512 /* Not assigned by Sun. */ 90 #define AUE_modify_group 6513 /* Not assigned by Sun. */ 91 #define AUE_add_to_group 6514 /* Not assigned by Sun. */ 92 #define AUE_remove_from_group 6515 /* Not assigned by Sun. */ 93 #define AUE_revoke_obj 6521 /* Not assigned by Sun; not used. */ 94 #define AUE_lw_login 6600 /* Not assigned by Sun; tentative. */ 95 #define AUE_lw_logout 6601 /* Not assigned by Sun; tentative. */ 96 #define AUE_auth_user 7000 /* Not assigned by Sun. */ 97 #define AUE_ssconn 7001 /* Not assigned by Sun. */ 98 #define AUE_ssauthorize 7002 /* Not assigned by Sun. */ 99 #define AUE_ssauthint 7003 /* Not assigned by Sun. */ 100 #define AUE_openssh 32800 101 102 #endif /* !_BSM_AUDIT_UEVENTS_H_ */ 103