xnu-2782.30.5.tar.gz

[apple/xnu.git] / bsd / bsm / audit_kevents.h

diff --git a/bsd/bsm/audit_kevents.h b/bsd/bsm/audit_kevents.h
index 268c456c3b050dea3d895ae0b927f9fd803961c4..e6ea2a05b0c7f86951b3ee1c263b363efe972bae 100644 (file)
--- a/bsd/bsm/audit_kevents.h
+++ b/bsd/bsm/audit_kevents.h
@@ -1,5 +1,5 @@
 /*-
- * Copyright (c) 2005-2009 Apple Inc.
+ * Copyright (c) 2005-2010 Apple Inc.
  * All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
@@ -36,7 +36,7 @@
  * The reserved event numbers for kernel events are 1...2047 and 43001..44900.
  */
 #define        AUE_IS_A_KEVENT(e)      (((e) > 0 && (e) < 2048) ||     \
-                                ((e) > 43000 && (e) < 45000))
+                                ((e) > 43000 && (e) < 44901))
 
 /*
  * Values marked as AUE_NULL are not required to be audited as per CAPP.
@@ -596,6 +596,25 @@
 #define        AUE_PWRITE              43193   /* Darwin/FreeBSD. */
 #define        AUE_FSCTL               43194   /* Darwin. */
 #define        AUE_FFSCTL              43195   /* Darwin. */
+#define        AUE_LPATHCONF           43196   /* FreeBSD. */
+#define        AUE_PDFORK              43197   /* FreeBSD. */
+#define        AUE_PDKILL              43198   /* FreeBSD. */
+#define        AUE_PDGETPID            43199   /* FreeBSD. */
+#define        AUE_PDWAIT              43200   /* FreeBSD. */
+#define        AUE_GETATTRLISTBULK     43201   /* Darwin. */
+#define        AUE_GETATTRLISTAT       43202   /* Darwin. */
+#define        AUE_OPENBYID            43203   /* Darwin. */
+#define        AUE_OPENBYID_R          43204   /* Darwin. */
+#define        AUE_OPENBYID_RT         43205   /* Darwin. */
+#define        AUE_OPENBYID_W          43206   /* Darwin. */
+#define        AUE_OPENBYID_WT         43207   /* Darwin. */
+#define        AUE_OPENBYID_RW         43208   /* Darwin. */
+#define        AUE_OPENBYID_RWT        43209   /* Darwin. */
+
+#define        AUE_SESSION_START       44901   /* Darwin. */
+#define        AUE_SESSION_UPDATE      44902   /* Darwin. */
+#define        AUE_SESSION_END         44903   /* Darwin. */
+#define        AUE_SESSION_CLOSE       44904   /* Darwin. */
 
 /*
  * Darwin BSM uses a number of AUE_O_* definitions, which are aliased to the
@@ -722,6 +741,7 @@
 #define        AUE_INITGROUPS          AUE_NULL
 #define        AUE_IOPOLICYSYS         AUE_NULL
 #define        AUE_ISSETUGID           AUE_NULL
+#define        AUE_LEDGER              AUE_NULL
 #define        AUE_LIOLISTIO           AUE_NULL
 #define        AUE_LISTXATTR           AUE_NULL
 #define        AUE_LSTATV              AUE_NULL