X-Git-Url: https://git.saurik.com/apple/xnu.git/blobdiff_plain/4452a7af2eac33dbad800bcc91f2399d62c18f53..2d21ac55c334faf3a56e5634905ed6987fc787d4:/bsd/bsm/audit_kevents.h?ds=sidebyside

diff --git a/bsd/bsm/audit_kevents.h b/bsd/bsm/audit_kevents.h
index 699ef143c..6df33b22a 100644
--- a/bsd/bsm/audit_kevents.h
+++ b/bsd/bsm/audit_kevents.h
@@ -1,4 +1,6 @@
 /*
+ * Copyright (c) 1999-2007 Apple Inc.  All Rights Reserved.
+ *
  * @APPLE_OSREFERENCE_LICENSE_HEADER_START@
  * 
  * This file contains Original Code and/or Modifications of Original Code
@@ -23,6 +25,12 @@
  * 
  * @APPLE_OSREFERENCE_LICENSE_HEADER_END@
  */
+/*
+ * NOTICE: This file was modified by SPARTA, Inc. in 2005 to introduce
+ * support for mandatory and extensible security protections.  This notice
+ * is included in support of clause 2.2 (b) of the Apple Public License,
+ * Version 2.0.
+ */
 
 #ifndef _BSM_AUDIT_KEVENTS_H_
 #define _BSM_AUDIT_KEVENTS_H_
@@ -97,7 +105,7 @@
 #define	AUE_PIPE        185             /*42*/
 #define AUE_GETEGID     AUE_NULL        /*43*/
 #define AUE_PROFILE     305		/*44*/
-#define AUE_KTRACE      306		/*45*/
+#define AUE_KTRACE      AUE_NULL	/*45*/
 #define AUE_REBOOT      308
 #define AUE_SIGACTION   AUE_NULL        /*46*/    /*XXX*/
 #define AUE_GETGID	AUE_NULL	/*47*/
@@ -311,10 +319,6 @@
 #define AUE_SEMINIT     AUE_NULL        /*275*/   /*ENOSYS*/
 #define AUE_SEMDESTROY  AUE_NULL        /*276*/   /*ENOSYS*/
 
-#define AUE_LOADSHFILE  347		/*296*/
-#define AUE_RESETSHFILE 348		/*297*/
-#define AUE_NEWSYSTEMSHREG 349		/*298*/
-
 #define AUE_GETSID      AUE_NULL        /*310*/
 
 #define AUE_MLOCKALL    AUE_NULL        /*324*/   /*ENOSYS*/
@@ -332,6 +336,41 @@
 #define AUE_PIDFORTASK	359
 #define AUE_SYSCTL_NONADMIN	360
 
+// BSM events for security system calls
+#define AUE_MAC_GET_PROC		400
+#define AUE_MAC_SET_PROC		401
+#define AUE_MAC_GET_PID			402
+#define AUE_MAC_SET_FILE		403
+#define AUE_MAC_GET_FILE		404
+#define AUE_MAC_SET_LINK		405
+#define AUE_MAC_GET_LINK		406
+#define AUE_MAC_SET_FD			407
+#define AUE_MAC_GET_FD			408
+#define AUE_MAC_EXECVE			409
+#define AUE_MAC_SYSCALL			410
+#define	AUE_MAC_GET_LCID		411
+#define	AUE_MAC_GET_LCTX		412
+#define	AUE_MAC_SET_LCTX		413
+#define	AUE_SETLCID			414
+#define	AUE_GETLCID			415
+#define	AUE_MAC_MOUNT			416
+#define	AUE_MAC_GET_MOUNT		417
+#define	AUE_MAC_GETFSSTAT		418
+ 
+// BSM events for extended attributes
+#define AUE_EXTATTR_SET_FILE		451
+#define AUE_EXTATTR_GET_FILE		452
+#define AUE_EXTATTR_DELETE_FILE		453
+#define AUE_EXTATTR_LIST_FILE		454
+#define AUE_EXTATTR_SET_LINK		455
+#define AUE_EXTATTR_GET_LINK		456 
+#define AUE_EXTATTR_DELETE_LINK		457
+#define AUE_EXTATTR_LIST_LINK		458
+#define AUE_EXTATTR_SET_FD		459
+#define AUE_EXTATTR_GET_FD		460
+#define AUE_EXTATTR_DELETE_FD		461
+#define AUE_EXTATTR_LIST_FD		462
+
 // BSM events - Have to identify which ones are relevant to MacOSX
 #define AUE_ACLSET                      251
 #define AUE_AUDIT                       211