xref: /freebsd/sys/bsm/audit_kevents.h (revision d056fa046c6a91b90cd98165face0e42a33a5173)
1 /*
2  * Copyright (c) 2005 Apple Computer, Inc.
3  * All rights reserved.
4  *
5  * @APPLE_BSD_LICENSE_HEADER_START@
6  *
7  * Redistribution and use in source and binary forms, with or without
8  * modification, are permitted provided that the following conditions
9  * are met:
10  *
11  * 1.  Redistributions of source code must retain the above copyright
12  *     notice, this list of conditions and the following disclaimer.
13  * 2.  Redistributions in binary form must reproduce the above copyright
14  *     notice, this list of conditions and the following disclaimer in the
15  *     documentation and/or other materials provided with the distribution.
16  * 3.  Neither the name of Apple Computer, Inc. ("Apple") nor the names of
17  *     its contributors may be used to endorse or promote products derived
18  *     from this software without specific prior written permission.
19  *
20  * THIS SOFTWARE IS PROVIDED BY APPLE AND ITS CONTRIBUTORS "AS IS" AND ANY
21  * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
22  * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
23  * DISCLAIMED. IN NO EVENT SHALL APPLE OR ITS CONTRIBUTORS BE LIABLE FOR ANY
24  * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
25  * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
26  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
27  * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
28  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
29  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
30  *
31  * @APPLE_BSD_LICENSE_HEADER_END@
32  *
33  * $P4: //depot/projects/trustedbsd/audit3/sys/bsm/audit_kevents.h#23 $
34  * $FreeBSD$
35  */
36 
37 #ifndef _BSM_AUDIT_KEVENTS_H_
38 #define	_BSM_AUDIT_KEVENTS_H_
39 
40 /*
41  * Values marked as AUE_NULL are not required to be audited as per CAPP.
42  *
43  * Some conflicts exist in the assignment of name to event number mappings
44  * between BSM implementations.  In general, we prefer the OpenSolaris
45  * definition as we consider Solaris BSM to be authoritative.  _DARWIN_ has
46  * been inserted for the Darwin variants.  If necessary, other tags will be
47  * added in the future.
48  */
49 #define	AUE_NULL		0
50 #define	AUE_EXIT		1
51 #define	AUE_FORK		2
52 #define	AUE_OPEN		3
53 #define	AUE_CREAT		4
54 #define	AUE_LINK		5
55 #define	AUE_UNLINK		6
56 #define	AUE_DELETE		AUE_UNLINK
57 #define	AUE_EXEC		7
58 #define	AUE_CHDIR		8
59 #define	AUE_MKNOD		9
60 #define	AUE_CHMOD		10
61 #define	AUE_CHOWN		11
62 #define	AUE_UMOUNT		12
63 #define	AUE_JUNK		13	/* Solaris-specific. */
64 #define	AUE_ACCESS		14
65 #define	AUE_CHECKUSERACCESS	AUE_ACCESS
66 #define	AUE_KILL		15
67 #define	AUE_STAT		16
68 #define	AUE_LSTAT		17
69 #define	AUE_ACCT		18
70 #define	AUE_MCTL		19	/* Solaris-specific. */
71 #define	AUE_REBOOT		20	/* XXX: Darwin conflict. */
72 #define	AUE_SYMLINK		21
73 #define	AUE_READLINK		22
74 #define	AUE_EXECVE		23
75 #define	AUE_CHROOT		24
76 #define	AUE_VFORK		25
77 #define	AUE_SETGROUPS		26
78 #define	AUE_SETPGRP		27
79 #define	AUE_SWAPON		28
80 #define	AUE_SETHOSTNAME		29	/* XXX: Darwin conflict. */
81 #define	AUE_FCNTL		30
82 #define	AUE_SETPRIORITY		31	/* XXX: Darwin conflict. */
83 #define	AUE_CONNECT		32
84 #define	AUE_ACCEPT		33
85 #define	AUE_BIND		34
86 #define	AUE_SETSOCKOPT		35
87 #define	AUE_VTRACE		36	/* Solaris-specific. */
88 #define	AUE_SETTIMEOFDAY	37	/* XXX: Darwin conflict. */
89 #define	AUE_FCHOWN		38
90 #define	AUE_FCHMOD		39
91 #define	AUE_SETREUID		40
92 #define	AUE_SETREGID		41
93 #define	AUE_RENAME		42
94 #define	AUE_TRUNCATE		43	/* XXX: Darwin conflict. */
95 #define	AUE_FTRUNCATE		44	/* XXX: Darwin conflict. */
96 #define	AUE_FLOCK		45	/* XXX: Darwin conflict. */
97 #define	AUE_SHUTDOWN		46
98 #define	AUE_MKDIR		47
99 #define	AUE_RMDIR		48
100 #define	AUE_UTIMES		49
101 #define	AUE_ADJTIME		50
102 #define	AUE_SETRLIMIT		51
103 #define	AUE_KILLPG		52
104 #define	AUE_NFS_SVC		53	/* XXX: Darwin conflict. */
105 #define	AUE_STATFS		54
106 #define	AUE_FSTATFS		55
107 #define	AUE_UNMOUNT		56	/* XXX: Darwin conflict. */
108 #define	AUE_ASYNC_DAEMON	57
109 #define	AUE_NFS_GETFH		58	/* XXX: Darwin conflict. */
110 #define	AUE_SETDOMAINNAME	59
111 #define	AUE_QUOTACTL		60	/* XXX: Darwin conflict. */
112 #define	AUE_EXPORTFS		61
113 #define	AUE_MOUNT		62
114 #define	AUE_SEMSYS		63
115 #define	AUE_MSGSYS		64
116 #define	AUE_SHMSYS		65
117 #define	AUE_BSMSYS		66	/* Solaris-specific. */
118 #define	AUE_RFSSYS		67	/* Solaris-specific. */
119 #define	AUE_FCHDIR		68
120 #define	AUE_FCHROOT		69
121 #define	AUE_VPIXSYS		70	/* Solaris-specific. */
122 #define	AUE_PATHCONF		71
123 #define	AUE_OPEN_R		72
124 #define	AUE_OPEN_RC		73
125 #define	AUE_OPEN_RT		74
126 #define	AUE_OPEN_RTC		75
127 #define	AUE_OPEN_W		76
128 #define	AUE_OPEN_WC		77
129 #define	AUE_OPEN_WT		78
130 #define	AUE_OPEN_WTC		79
131 #define	AUE_OPEN_RW		80
132 #define	AUE_OPEN_RWC		81
133 #define	AUE_OPEN_RWT		82
134 #define	AUE_OPEN_RWTC		83
135 #define	AUE_MSGCTL		84
136 #define	AUE_MSGCTL_RMID		85
137 #define	AUE_MSGCTL_SET		86
138 #define	AUE_MSGCTL_STAT		87
139 #define	AUE_MSGGET		88
140 #define	AUE_MSGRCV		89
141 #define	AUE_MSGSND		90
142 #define	AUE_SHMCTL		91
143 #define	AUE_SHMCTL_RMID		92
144 #define	AUE_SHMCTL_SET		93
145 #define	AUE_SHMCTL_STAT		94
146 #define	AUE_SHMGET		95
147 #define	AUE_SHMAT		96
148 #define	AUE_SHMDT		97
149 #define	AUE_SEMCTL		98
150 #define	AUE_SEMCTL_RMID		99
151 #define	AUE_SEMCTL_SET		100
152 #define	AUE_SEMCTL_STAT		101
153 #define	AUE_SEMCTL_GETNCNT	102
154 #define	AUE_SEMCTL_GETPID	103
155 #define	AUE_SEMCTL_GETVAL	104
156 #define	AUE_SEMCTL_GETALL	105
157 #define	AUE_SEMCTL_GETZCNT	106
158 #define	AUE_SEMCTL_SETVAL	107
159 #define	AUE_SEMCTL_SETALL	108
160 #define	AUE_SEMGET		109
161 #define	AUE_SEMOP		110
162 #define	AUE_CORE		111	/* Solaris-specific, currently. */
163 #define	AUE_CLOSE		112
164 #define	AUE_SYSTEMBOOT		113
165 #define	AUE_ASYNC_DAEMON_EXIT	114	/* Solaris-specific. */
166 #define	AUE_NFSSVC_EXIT		115	/* Solaris-specific. */
167 #define	AUE_WRITEL		128	/* Solaris-specific. */
168 #define	AUE_WRITEVL		129	/* Solaris-specific. */
169 #define	AUE_GETAUID		130
170 #define	AUE_SETAUID		131
171 #define	AUE_GETAUDIT		132
172 #define	AUE_SETAUDIT		133
173 #define	AUE_GETUSERAUDIT	134	/* Solaris-specific. */
174 #define	AUE_SETUSERAUDIT	135	/* Solaris-specific. */
175 #define	AUE_AUDITSVC		136	/* Solaris-specific. */
176 #define	AUE_AUDITUSER		137	/* Solaris-specific. */
177 #define	AUE_AUDITON		138
178 #define	AUE_AUDITON_GTERMID	139	/* Solaris-specific. */
179 #define	AUE_AUDITON_STERMID	140	/* Solaris-specific. */
180 #define	AUE_AUDITON_GPOLICY	141
181 #define	AUE_AUDITON_SPOLICY	142
182 #define	AUE_AUDITON_GQCTRL	145
183 #define	AUE_AUDITON_SQCTRL	146
184 #define	AUE_GETKERNSTATE	147	/* Solaris-specific. */
185 #define	AUE_SETKERNSTATE	148	/* Solaris-specific. */
186 #define	AUE_GETPORTAUDIT	149	/* Solaris-specific. */
187 #define	AUE_AUDISTAT		150	/* Solaris-specific. */
188 #define	AUE_ENTERPROM		153	/* Solaris-specific. */
189 #define	AUE_EXITPROM		154	/* Solaris-specific. */
190 #define	AUE_IOCTL		158
191 #define	AUE_SOCKET		183
192 #define	AUE_SENDTO		184
193 #define	AUE_PIPE		185
194 #define	AUE_SOCKETPAIR		186	/* XXX: Darwin conflict. */
195 #define	AUE_SEND		187
196 #define	AUE_SENDMSG		188
197 #define	AUE_RECV		189
198 #define	AUE_RECVMSG		190
199 #define	AUE_RECVFROM		191
200 #define	AUE_READ		192
201 #define	AUE_LSEEK		194
202 #define	AUE_WRITE		195
203 #define	AUE_WRITEV		196
204 #define	AUE_NFS			197	/* Solaris-specific. */
205 #define	AUE_READV		198
206 					/* XXXRW: XXX Solaris old stat()? */
207 #define	AUE_SETUID		200	/* XXXRW: Solaris old setuid? */
208 #define	AUE_STIME		201	/* XXXRW: Solaris old stime? */
209 #define	AUE_UTIME		202	/* XXXRW: Solaris old utime? */
210 #define	AUE_NICE		203	/* XXXRW: Solaris old nice? */
211 					/* XXXRW: Solaris old setpgrp? */
212 #define	AUE_SETGID		205	/* XXXRW: Solaris old setgid? */
213 					/* XXXRW: Solaris readl? */
214 					/* XXXRW: Solaris readvl()? */
215 #define	AUE_DUP2		209
216 #define	AUE_MMAP		210
217 #define	AUE_AUDIT		211
218 #define	AUE_PRIOCNTLSYS		212
219 #define	AUE_MUNMAP		213
220 #define	AUE_SETEGID		214
221 #define	AUE_SETEUID		215
222 #define	AUE_PUTMSG		216
223 #define	AUE_GETMSG		217	/* Solaris-specific. */
224 #define	AUE_PUTPMSG		218	/* Solaris-specific. */
225 #define	AUE_GETPMSG		219	/* Solaris-specific. */
226 #define	AUE_AUDITSYS		220	/* Solaris-specific. */
227 #define	AUE_AUDITON_GETKMASK	221
228 #define	AUE_AUDITON_SETKMASK	222
229 #define	AUE_AUDITON_GETCWD	223
230 #define	AUE_AUDITON_GETCAR	224
231 #define	AUE_AUDITON_GETSTAT	225
232 #define	AUE_AUDITON_SETSTAT	226
233 #define	AUE_AUDITON_SETUMASK	227
234 #define	AUE_AUDITON_SETSMASK	228
235 #define	AUE_AUDITON_GETCOND	229
236 #define	AUE_AUDITON_SETCOND	230
237 #define	AUE_AUDITON_GETCLASS	231
238 #define	AUE_AUDITON_SETCLASS	232
239 #define	AUE_UTSSYS		233	/* Solaris-specific. */
240 #define	AUE_STATVFS		234
241 #define	AUE_XSTAT		235
242 #define	AUE_LXSTAT		236
243 #define	AUE_LCHOWN		237
244 #define	AUE_MEMCNTL		238	/* Solaris-specific. */
245 #define	AUE_SYSINFO		239	/* Solaris-specific. */
246 #define	AUE_XMKNOD		240	/* Solaris-specific. */
247 #define	AUE_FORK1		241
248 					/* XXXRW: Solaris modctl()? */
249 #define	AUE_MODLOAD		243
250 #define	AUE_MODUNLOAD		244
251 #define	AUE_MODCONFIG		245	/* Solaris-specific. */
252 #define	AUE_MODADDMAJ		246	/* Solaris-specific. */
253 #define	AUE_SOCKACCEPT		247
254 #define	AUE_SOCKCONNECT		248
255 #define	AUE_SOCKSEND		249
256 #define	AUE_SOCKRECEIVE		250
257 #define	AUE_ACLSET		251
258 #define	AUE_FACLSET		252
259 #define	AUE_DOORFS_DOOR_CALL	254	/* Solaris-specific. */
260 #define	AUE_DOORFS_DOOR_RETURN	255	/* Solaris-specific. */
261 #define	AUE_DOORFS_DOOR_CREATE	256	/* Solaris-specific. */
262 #define	AUE_DOORFS_DOOR_REVOKE	257	/* Solaris-specific. */
263 #define	AUE_DOORFS_DOOR_INFO	258	/* Solaris-specific. */
264 #define	AUE_DOORFS_DOOR_CRED	259	/* Solaris-specific. */
265 #define	AUE_DOORFS_DOOR_BIND	260	/* Solaris-specific. */
266 #define	AUE_DOORFS_DOOR_UNBIND	261	/* Solaris-specific. */
267 #define	AUE_P_ONLINE		262	/* Solaris-specific. */
268 #define	AUE_PROCESSOR_BIND	263	/* Solaris-specific. */
269 #define	AUE_INST_SYNC		264	/* Solaris-specific. */
270 #define	AUE_SOCK_CONFIG		265	/* Solaris-specific. */
271 #define	AUE_SETAUDIT_ADDR	266
272 #define	AUE_GETAUDIT_ADDR	267
273 #define	AUE_CLOCK_SETTIME	287
274 #define	AUE_NTP_ADJTIME		288
275 
276 /*
277  * Events not present in OpenSolaris BSM, generally derived from Apple Darwin
278  * BSM or added in OpenBSM.  This start a little too close to the top end of
279  * the OpenSolaris event list for my comfort.
280  */
281 #define	AUE_GETFSSTAT		301
282 #define	AUE_PTRACE		302
283 #define	AUE_CHFLAGS		303
284 #define	AUE_FCHFLAGS		304
285 #define	AUE_PROFILE		305
286 #define	AUE_KTRACE		306
287 #define	AUE_SETLOGIN		307
288 #define	AUE_DARWIN_REBOOT	308	/* XXX: See AUE_REBOOT. */
289 #define	AUE_REVOKE		309
290 #define	AUE_UMASK		310
291 #define	AUE_MPROTECT		311
292 #define	AUE_DARWIN_SETPRIORITY	312	/* XXX: See AUE_SETPRIORITY. */
293 #define	AUE_DARWIN_SETTIMEOFDAY	313	/* XXX: See AUE_SETTIMEOFDAY. */
294 #define	AUE_DARWIN_FLOCK	314	/* XXX: See AUE_FLOCK. */
295 #define	AUE_MKFIFO		315
296 #define	AUE_POLL		316
297 #define	AUE_DARWIN_SOCKETPAIR	317	/* XXXRW: See AUE_SOCKETPAIR. */
298 #define	AUE_FUTIMES		318
299 #define	AUE_SETSID		319
300 #define	AUE_SETPRIVEXEC		320	/* Darwin-specific. */
301 #define	AUE_DARWIN_NFSSVC	321	/* XXX: See AUE_NFS_SVC. */
302 #define	AUE_DARWIN_GETFH	322	/* XXX: See AUE_NFS_GETFH. */
303 #define	AUE_DARWIN_QUOTACTL	323	/* XXX: See AUE_QUOTACTL. */
304 #define	AUE_ADDPROFILE		324	/* Darwin-specific. */
305 #define	AUE_KDEBUGTRACE		325	/* Darwin-specific. */
306 #define	AUE_KDBUGTRACE		AUE_KDEBUGTRACE
307 #define	AUE_FSTAT		326
308 #define	AUE_FPATHCONF		327
309 #define	AUE_GETDIRENTRIES	328
310 #define	AUE_DARWIN_TRUNCATE	329	/* XXX: See AUE_TRUNCATE. */
311 #define	AUE_DARWIN_FTRUNCATE	330	/* XXX: See AUE_FTRUNCATE. */
312 #define	AUE_SYSCTL		331
313 #define	AUE_MLOCK		332
314 #define	AUE_MUNLOCK		333
315 #define	AUE_UNDELETE		334
316 #define	AUE_GETATTRLIST		335	/* Darwin-specific. */
317 #define	AUE_SETATTRLIST		336	/* Darwin-specific. */
318 #define	AUE_GETDIRENTRIESATTR	337	/* Darwin-specific. */
319 #define	AUE_EXCHANGEDATA	338	/* Darwin-specific. */
320 #define	AUE_SEARCHFS		339	/* Darwin-specific. */
321 #define	AUE_MINHERIT		340
322 #define	AUE_SEMCONFIG		341
323 #define	AUE_SEMOPEN		342
324 #define	AUE_SEMCLOSE		343
325 #define	AUE_SEMUNLINK		344
326 #define	AUE_SHMOPEN		345
327 #define	AUE_SHMUNLINK		346
328 #define	AUE_LOADSHFILE		347	/* Darwin-specific. */
329 #define	AUE_RESETSHFILE		348	/* Darwin-specific. */
330 #define	AUE_NEWSYSTEMSHREG	349	/* Darwin-specific. */
331 #define	AUE_PTHREADKILL		350	/* Darwin-specific. */
332 #define	AUE_PTHREADSIGMASK	351	/* Darwin-specific. */
333 #define	AUE_AUDITCTL		352
334 #define	AUE_RFORK		353
335 #define	AUE_LCHMOD		354
336 #define	AUE_SWAPOFF		355
337 #define	AUE_INITPROCESS		356	/* Darwin-specific. */
338 #define	AUE_MAPFD		357	/* Darwin-specific. */
339 #define	AUE_TASKFORPID		358	/* Darwin-specific. */
340 #define	AUE_PIDFORTASK		359	/* Darwin-specific. */
341 #define	AUE_SYSCTL_NONADMIN	360
342 #define	AUE_COPYFILE		361	/* Darwin-specific. */
343 #define	AUE_LUTIMES		362
344 #define	AUE_LCHFLAGS		363	/* FreeBSD-specific. */
345 #define	AUE_SENDFILE		364	/* BSD/Linux-specific. */
346 #define	AUE_USELIB		365	/* Linux-specific. */
347 #define	AUE_GETRESUID		366
348 #define	AUE_SETRESUID		367
349 #define	AUE_GETRESGID		368
350 #define	AUE_SETRESGID		369
351 #define	AUE_WAIT4		370	/* FreeBSD-specific. */
352 #define	AUE_LGETFH		371	/* FreeBSD-specific. */
353 #define	AUE_FHSTATFS		372	/* FreeBSD-specific. */
354 #define	AUE_FHOPEN		373	/* FreeBSD-specific. */
355 #define	AUE_FHSTAT		374	/* FreeBSD-specific. */
356 #define	AUE_JAIL		375	/* FreeBSD-specific. */
357 #define	AUE_EACCESS		376	/* FreeBSD-specific. */
358 #define	AUE_KQUEUE		377	/* FreeBSD-specific. */
359 #define	AUE_KEVENT		378	/* FreeBSD-specific. */
360 #define	AUE_FSYNC		379
361 #define	AUE_NMOUNT		380	/* FreeBSD-specific. */
362 #define	AUE_BDFLUSH		381	/* Linux-specific. */
363 #define	AUE_SETFSUID		382	/* Linux-specific. */
364 #define	AUE_SETFSGID		383	/* Linux-specific. */
365 #define	AUE_PERSONALITY		384	/* Linux-specific. */
366 #define	AUE_SCHED_GETSCHEDULER	385	/* POSIX.1b. */
367 #define	AUE_SCHED_SETSCHEDULER	386	/* POSIX.1b. */
368 #define	AUE_PRCTL		387	/* Linux-specific. */
369 #define	AUE_GETCWD		388	/* FreeBSD/Linux-specific. */
370 #define	AUE_CAPGET		389	/* Linux-specific. */
371 #define	AUE_CAPSET		390	/* Linux-specific. */
372 #define	AUE_PIVOT_ROOT		391	/* Linux-specific. */
373 #define	AUE_RTPRIO		392	/* FreeBSD-specific. */
374 #define	AUE_SCHED_GETPARAM	393	/* POSIX.1b. */
375 #define	AUE_SCHED_SETPARAM	394	/* POSIX.1b. */
376 #define	AUE_SCHED_GET_PRIORITY_MAX	395	/* POSIX.1b. */
377 #define	AUE_SCHED_GET_PRIORITY_MIN	396	/* POSIX.1b. */
378 #define	AUE_SCHED_RR_GET_INTERVAL	397	/* POSIX.1b. */
379 #define	AUE_ACL_GET_FILE		398	/* FreeBSD. */
380 #define	AUE_ACL_SET_FILE		399	/* FreeBSD. */
381 #define	AUE_ACL_GET_FD			400	/* FreeBSD. */
382 #define	AUE_ACL_SET_FD			401	/* FreeBSD. */
383 #define	AUE_ACL_DELETE_FILE		402	/* FreeBSD. */
384 #define	AUE_ACL_DELETE_FD		403	/* FreeBSD. */
385 #define	AUE_ACL_CHECK_FILE		404	/* FreeBSD. */
386 #define	AUE_ACL_CHECK_FD		405	/* FreeBSD. */
387 #define	AUE_ACL_GET_LINK		406	/* FreeBSD. */
388 #define	AUE_ACL_SET_LINK		407	/* FreeBSD. */
389 #define	AUE_ACL_DELETE_LINK		408	/* FreeBSD. */
390 #define	AUE_ACL_CHECK_LINK		409	/* FreeBSD. */
391 #define	AUE_SYSARCH			410	/* FreeBSD. */
392 #define	AUE_EXTATTRCTL			411	/* FreeBSD. */
393 #define	AUE_EXTATTR_GET_FILE		412	/* FreeBSD. */
394 #define	AUE_EXTATTR_SET_FILE		413	/* FreeBSD. */
395 #define	AUE_EXTATTR_LIST_FILE		414	/* FreeBSD. */
396 #define	AUE_EXTATTR_DELETE_FILE		415	/* FreeBSD. */
397 #define	AUE_EXTATTR_GET_FD		416	/* FreeBSD. */
398 #define	AUE_EXTATTR_SET_FD		417	/* FreeBSD. */
399 #define	AUE_EXTATTR_LIST_FD		418	/* FreeBSD. */
400 #define	AUE_EXTATTR_DELETE_FD		419	/* FreeBSD. */
401 #define	AUE_EXTATTR_GET_LINK		420	/* FreeBSD. */
402 #define	AUE_EXTATTR_SET_LINK		421	/* FreeBSD. */
403 #define	AUE_EXTATTR_LIST_LINK		422	/* FreeBSD. */
404 #define	AUE_EXTATTR_DELETE_LINK		423	/* FreeBSD. */
405 
406 /*
407  * Darwin BSM uses a number of AUE_O_* definitions, which are aliased to the
408  * normal Solaris BSM identifiers.  _O_ refers to it being an old, or compat
409  * interface.  In most cases, Darwin has never implemented these system calls
410  * but picked up the fields in their system call table from their FreeBSD
411  * import.  Happily, these have different names than the AUE_O* definitions
412  * in Solaris BSM.
413  */
414 #define	AUE_O_CREAT		AUE_OPEN_RWTC	/* Darwin */
415 #define	AUE_O_EXECVE		AUE_NULL	/* Darwin */
416 #define	AUE_O_SBREAK		AUE_NULL	/* Darwin */
417 #define	AUE_O_LSEEK		AUE_NULL	/* Darwin */
418 #define	AUE_O_MOUNT		AUE_NULL	/* Darwin */
419 #define	AUE_O_UMOUNT		AUE_NULL	/* Darwin */
420 #define	AUE_O_STAT		AUE_STAT	/* Darwin */
421 #define	AUE_O_LSTAT		AUE_LSTAT	/* Darwin */
422 #define	AUE_O_FSTAT		AUE_FSTAT	/* Darwin */
423 #define	AUE_O_GETPAGESIZE	AUE_NULL	/* Darwin */
424 #define	AUE_O_VREAD		AUE_NULL	/* Darwin */
425 #define	AUE_O_VWRITE		AUE_NULL	/* Darwin */
426 #define	AUE_O_MMAP		AUE_MMAP	/* Darwin */
427 #define	AUE_O_VADVISE		AUE_NULL	/* Darwin */
428 #define	AUE_O_VHANGUP		AUE_NULL	/* Darwin */
429 #define	AUE_O_VLIMIT		AUE_NULL	/* Darwin */
430 #define	AUE_O_WAIT		AUE_NULL	/* Darwin */
431 #define	AUE_O_GETHOSTNAME	AUE_NULL	/* Darwin */
432 #define	AUE_O_SETHOSTNAME	AUE_SYSCTL	/* Darwin */
433 #define	AUE_O_GETDOPT		AUE_NULL	/* Darwin */
434 #define	AUE_O_SETDOPT		AUE_NULL	/* Darwin */
435 #define	AUE_O_ACCEPT		AUE_NULL	/* Darwin */
436 #define	AUE_O_SEND		AUE_SENDMSG	/* Darwin */
437 #define	AUE_O_RECV		AUE_RECVMSG	/* Darwin */
438 #define	AUE_O_VTIMES		AUE_NULL	/* Darwin */
439 #define	AUE_O_SIGVEC		AUE_NULL	/* Darwin */
440 #define	AUE_O_SIGBLOCK		AUE_NULL	/* Darwin */
441 #define	AUE_O_SIGSETMASK	AUE_NULL	/* Darwin */
442 #define	AUE_O_SIGSTACK		AUE_NULL	/* Darwin */
443 #define	AUE_O_RECVMSG		AUE_RECVMSG	/* Darwin */
444 #define	AUE_O_SENDMSG		AUE_SENDMSG	/* Darwin */
445 #define	AUE_O_VTRACE		AUE_NULL	/* Darwin */
446 #define	AUE_O_RESUBA		AUE_NULL	/* Darwin */
447 #define	AUE_O_RECVFROM		AUE_RECVFROM	/* Darwin */
448 #define	AUE_O_SETREUID		AUE_SETREUID	/* Darwin */
449 #define	AUE_O_SETREGID		AUE_SETREGID	/* Darwin */
450 #define	AUE_O_GETDIRENTRIES	AUE_GETDIRENTRIES	/* Darwin */
451 #define	AUE_O_TRUNCATE		AUE_TRUNCATE	/* Darwin */
452 #define	AUE_O_FTRUNCATE		AUE_FTRUNCATE	/* Darwin */
453 #define	AUE_O_GETPEERNAME	AUE_NULL	/* Darwin */
454 #define	AUE_O_GETHOSTID		AUE_NULL	/* Darwin */
455 #define	AUE_O_SETHOSTID		AUE_NULL	/* Darwin */
456 #define	AUE_O_GETRLIMIT		AUE_NULL	/* Darwin */
457 #define	AUE_O_SETRLIMIT		AUE_SETRLIMIT	/* Darwin */
458 #define	AUE_O_KILLPG		AUE_KILL	/* Darwin */
459 #define	AUE_O_SETQUOTA		AUE_NULL	/* Darwin */
460 #define	AUE_O_QUOTA		AUE_NULL	/* Darwin */
461 #define	AUE_O_GETSOCKNAME	AUE_NULL	/* Darwin */
462 #define	AUE_O_GETDIREENTRIES	AUE_GETDIREENTRIES	/* Darwin */
463 #define	AUE_O_ASYNCDAEMON	AUE_NULL	/* Darwin */
464 #define	AUE_O_GETDOMAINNAME	AUE_NULL	/* Darwin */
465 #define	AUE_O_SETDOMAINNAME	AUE_SYSCTL	/* Darwin */
466 #define	AUE_O_PCFS_MOUNT	AUE_NULL	/* Darwin */
467 #define	AUE_O_EXPORTFS		AUE_NULL	/* Darwin */
468 #define	AUE_O_USTATE		AUE_NULL	/* Darwin */
469 #define	AUE_O_WAIT3		AUE_NULL	/* Darwin */
470 #define	AUE_O_RPAUSE		AUE_NULL	/* Darwin */
471 #define	AUE_O_GETDENTS		AUE_NULL	/* Darwin */
472 
473 /*
474  * Possible desired future values based on review of BSD/Darwin system calls.
475  */
476 #define	AUE_DUP			AUE_NULL
477 #define	AUE_FSCTL		AUE_NULL
478 #define	AUE_FSTATV		AUE_NULL
479 #define	AUE_GCCONTROL		AUE_NULL
480 #define	AUE_GETDTABLESIZE	AUE_NULL
481 #define	AUE_GETEGID		AUE_NULL
482 #define	AUE_GETEUID		AUE_NULL
483 #define	AUE_GETGID		AUE_NULL
484 #define	AUE_GETGROUPS		AUE_NULL
485 #define	AUE_GETITIMER		AUE_NULL
486 #define	AUE_GETLOGIN		AUE_NULL
487 #define	AUE_GETPEERNAME		AUE_NULL
488 #define	AUE_GETPGID		AUE_NULL
489 #define	AUE_GETPGRP		AUE_NULL
490 #define	AUE_GETPID		AUE_NULL
491 #define	AUE_GETPPID		AUE_NULL
492 #define	AUE_GETPRIORITY		AUE_NULL
493 #define	AUE_GETRLIMIT		AUE_NULL
494 #define	AUE_GETRUSAGE		AUE_NULL
495 #define	AUE_GETSID		AUE_NULL
496 #define	AUE_GETSOCKNAME		AUE_NULL
497 #define	AUE_GETTIMEOFDAY	AUE_NULL
498 #define	AUE_GETUID		AUE_NULL
499 #define	AUE_GETSOCKOPT		AUE_NULL
500 #define	AUE_GTSOCKOPT		AUE_GETSOCKOPT	/* XXX: Typo in Darwin. */
501 #define	AUE_ISSETUGID		AUE_NULL
502 #define	AUE_LISTEN		AUE_NULL
503 #define	AUE_LSTATV		AUE_NULL
504 #define	AUE_MADVISE		AUE_NULL
505 #define	AUE_MINCORE		AUE_NULL
506 #define	AUE_MKCOMPLEX		AUE_NULL
507 #define	AUE_MLOCKALL		AUE_NULL
508 #define	AUE_MODWATCH		AUE_NULL
509 #define	AUE_MSGCL		AUE_NULL
510 #define	AUE_MSYNC		AUE_NULL
511 #define	AUE_MUNLOCKALL		AUE_NULL
512 #define	AUE_PREAD		AUE_NULL
513 #define	AUE_PWRITE		AUE_NULL
514 #define	AUE_PREADV		AUE_NULL
515 #define	AUE_PWRITEV		AUE_NULL
516 #define	AUE_SBRK		AUE_NULL
517 #define	AUE_SELECT		AUE_NULL
518 #define	AUE_SEMDESTROY		AUE_NULL
519 #define	AUE_SEMGETVALUE		AUE_NULL
520 #define	AUE_SEMINIT		AUE_NULL
521 #define	AUE_SEMPOST		AUE_NULL
522 #define	AUE_SEMTRYWAIT		AUE_NULL
523 #define	AUE_SEMWAIT		AUE_NULL
524 #define	AUE_SETITIMER		AUE_NULL
525 #define	AUE_SIGACTION		AUE_NULL
526 #define	AUE_SIGALTSTACK		AUE_NULL
527 #define	AUE_SIGPENDING		AUE_NULL
528 #define	AUE_SIGPROCMASK		AUE_NULL
529 #define	AUE_SIGRETURN		AUE_NULL
530 #define	AUE_SIGSUSPEND		AUE_NULL
531 #define	AUE_SIGWAIT		AUE_NULL
532 #define	AUE_SSTK		AUE_NULL
533 #define	AUE_STATV		AUE_NULL
534 #define	AUE_SYNC		AUE_NULL
535 #define	AUE_SYSCALL		AUE_NULL
536 #define	AUE_TABLE		AUE_NULL
537 #define	AUE_WAITEVENT		AUE_NULL
538 #define	AUE_WATCHEVENT		AUE_NULL
539 
540 #endif /* !_BSM_AUDIT_KEVENTS_H_ */
541