2 * Copyright (c) 2004 Apple Inc.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 * 3. Neither the name of Apple Inc. ("Apple") nor the names of
14 * its contributors may be used to endorse or promote products derived
15 * from this software without specific prior written permission.
17 * THIS SOFTWARE IS PROVIDED BY APPLE AND ITS CONTRIBUTORS "AS IS" AND
18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20 * ARE DISCLAIMED. IN NO EVENT SHALL APPLE OR ITS CONTRIBUTORS BE LIABLE FOR
21 * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
25 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
26 * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
27 * POSSIBILITY OF SUCH DAMAGE.
29 * $P4: //depot/projects/trustedbsd/openbsm/bsm/audit_uevents.h#8 $
32 #ifndef _BSM_AUDIT_UEVENTS_H_
33 #define _BSM_AUDIT_UEVENTS_H_
36 * User level audit event numbers
38 * Range of audit event numbers:
40 * 1 - 2047 Reserved for kernel events
41 * 2048 - 32767 Defined by BSM for user events
42 * 32768 - 36864 Reserved for Mac OS-X applications
43 * 36865 - 65535 Reserved for applications
46 #define AUE_at_create 6144
47 #define AUE_at_delete 6145
48 #define AUE_at_perm 6146
49 #define AUE_cron_invoke 6147
50 #define AUE_crontab_create 6148
51 #define AUE_crontab_delete 6149
52 #define AUE_crontab_perm 6150
53 #define AUE_inetd_connect 6151
54 #define AUE_login 6152
55 #define AUE_logout 6153
56 #define AUE_telnet 6154
57 #define AUE_rlogin 6155
58 #define AUE_mountd_mount 6156
59 #define AUE_mountd_umount 6157
63 #define AUE_reboot 6161
64 #define AUE_rexecd 6162
65 #define AUE_passwd 6163
69 #define AUE_uadmin 6167
70 #define AUE_shutdown 6168
71 #define AUE_poweroff 6169
72 #define AUE_crontab_mod 6170
73 #define AUE_audit_startup 6171
74 #define AUE_audit_shutdown 6172
75 #define AUE_allocate_succ 6200
76 #define AUE_allocate_fail 6201
77 #define AUE_deallocate_succ 6202
78 #define AUE_deallocate_fail 6203
79 #define AUE_listdevice_succ 6205
80 #define AUE_listdevice_fail 6206
81 #define AUE_create_user 6207
82 #define AUE_modify_user 6208
83 #define AUE_delete_user 6209
84 #define AUE_disable_user 6210
85 #define AUE_enable_user 6211
87 #define AUE_modify_password 6501 /* Not assigned by Sun. */
88 #define AUE_create_group 6511 /* Not assigned by Sun. */
89 #define AUE_delete_group 6512 /* Not assigned by Sun. */
90 #define AUE_modify_group 6513 /* Not assigned by Sun. */
91 #define AUE_add_to_group 6514 /* Not assigned by Sun. */
92 #define AUE_remove_from_group 6515 /* Not assigned by Sun. */
93 #define AUE_revoke_obj 6521 /* Not assigned by Sun; not used. */
94 #define AUE_lw_login 6600 /* Not assigned by Sun; tentative. */
95 #define AUE_lw_logout 6601 /* Not assigned by Sun; tentative. */
96 #define AUE_auth_user 7000 /* Not assigned by Sun. */
97 #define AUE_ssconn 7001 /* Not assigned by Sun. */
98 #define AUE_ssauthorize 7002 /* Not assigned by Sun. */
99 #define AUE_ssauthint 7003 /* Not assigned by Sun. */
100 #define AUE_openssh 32800
102 #endif /* !_BSM_AUDIT_UEVENTS_H_ */