aboutsummaryrefslogtreecommitdiff
path: root/sys/bsm/audit.h
diff options
context:
space:
mode:
authorRobert Watson <rwatson@FreeBSD.org>2009-03-02 10:46:23 +0000
committerRobert Watson <rwatson@FreeBSD.org>2009-03-02 10:46:23 +0000
commit694dcf49ac5cf33f6cbf6e1a4687a1eb9a2dc0ce (patch)
treea5ce36d3531eaaae9f5cf6c822527f47a238e1e9 /sys/bsm/audit.h
parenta4bd134433fd2aaa1d814163ac7b29acc444654a (diff)
downloadsrc-694dcf49ac5cf33f6cbf6e1a4687a1eb9a2dc0ce.tar.gz
src-694dcf49ac5cf33f6cbf6e1a4687a1eb9a2dc0ce.zip
Vendor import of OpenBSM 1.1 beta1, which incorporates the followingvendor/openbsm/1.1-BETA-1
changes since the last imported OpenBSM release: OpenBSM 1.1 beta 1 - The filesz parameter in audit_control(5) now accepts suffixes: 'B' for Bytes, 'K' for Kilobytes, 'M' for Megabytes, and 'G' for Gigabytes. For legacy support no suffix defaults to bytes. - Audit trail log expiration support added. It is configured in audit_control(5) with the expire-after parameter. If there is no expire-after parameter in audit_control(5), the default, then the audit trail files are not expired and removed. See audit_control(5) for more information. - Change defaults in audit_control: warn at 5% rather than 20% free for audit partitions, rotate automatically at 2mb, and set the default policy to cnt,argv rather than cnt so that execve(2) arguments are captured if AUE_EXECVE events are audited. These may provide more usable defaults for many users. - Use au_domain_to_bsm(3) and au_socket_type_to_bsm(3) to convert au_to_socket_ex(3) arguments to BSM format. - Fix error encoding AUT_IPC_PERM tokens. Obtained from: TrustedBSD Project Sponsored by: Apple Inc.
Notes
Notes: svn path=/vendor/openbsm/dist/; revision=189277 svn path=/vendor/openbsm/1.1-BETA-1/; revision=189278; tag=vendor/openbsm/1.1-BETA-1
Diffstat (limited to 'sys/bsm/audit.h')
-rw-r--r--sys/bsm/audit.h7
1 files changed, 4 insertions, 3 deletions
diff --git a/sys/bsm/audit.h b/sys/bsm/audit.h
index 3b22b033635e..b39de0a6a6d4 100644
--- a/sys/bsm/audit.h
+++ b/sys/bsm/audit.h
@@ -26,7 +26,7 @@
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
* THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
*
- * $P4: //depot/projects/trustedbsd/openbsm/sys/bsm/audit.h#4 $
+ * $P4: //depot/projects/trustedbsd/openbsm/sys/bsm/audit.h#5 $
*/
#ifndef _BSM_AUDIT_H
@@ -65,8 +65,9 @@
#define AUDIT_TRIGGER_CLOSE_AND_DIE 4 /* Terminate audit. */
#define AUDIT_TRIGGER_NO_SPACE 5 /* Below min free space. */
#define AUDIT_TRIGGER_ROTATE_USER 6 /* User requests rotate. */
-#define AUDIT_TRIGGER_INITIALIZE 7 /* Initialize audit. */
-#define AUDIT_TRIGGER_MAX 7
+#define AUDIT_TRIGGER_INITIALIZE 7 /* User initialize of auditd. */
+#define AUDIT_TRIGGER_EXPIRE_TRAILS 8 /* User expiration of trails. */
+#define AUDIT_TRIGGER_MAX 8
/*
* The special device filename (FreeBSD).