Date: Sat, 8 May 2010 16:32:26 GMT From: Efstratios Karatzas <gpf@FreeBSD.org> To: Perforce Change Reviews <perforce@FreeBSD.org> Subject: PERFORCE change 177959 for review Message-ID: <201005081632.o48GWQQO022477@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://p4web.freebsd.org/@@177959?ac=10 Change 177959 by gpf@gpf_desktop on 2010/05/08 16:31:35 the file in /etc that describes and sets the audit events; added nfs rpc events. I'm still not certain about the classes that some of these events belong to; expect this list to change in the next few days Affected files ... .. //depot/projects/soc2010/gpf_audit/freebsd/src/contrib/openbsm/etc/audit_event#2 edit Differences ... ==== //depot/projects/soc2010/gpf_audit/freebsd/src/contrib/openbsm/etc/audit_event#2 (text) ==== @@ -360,6 +360,32 @@ 360:AUE_DARWIN_SYSCTL_NONADMIN:sysctl() - non-admin:ot 361:AUE_DARWIN_COPYFILE:copyfile():fr,fw # +# NFS-specific kernel events +# +2000:AUE_NFS_NULL:nfsrv_null():no +2001:AUE_NFS_GETATTR:nfsrv_getattr():fa +2002:AUE_NFS_SETATTR:nfsrv_setattr():fm +2003:AUE_NFS_LOOKUP:nfsrv_lookup():ot +2004:AUE_NFS_ACCESS:nfsrv3_access():fa +2005:AUE_NFS_READLINK:nfsrv_readlink():fr +2006:AUE_NFS_READ:nfsrv_read():fr +2007:AUE_NFS_WRITE:nfsrv_write():fw +2008:AUE_NFS_CREATE:nfsrv_create():fc +2009:AUE_NFS_MKDIR:nfsrv_mkdir():fc +2010:AUE_NFS_SYMLINK:nfsrv_symlink():fc +2011:AUE_NFS_MKNODE:nfsrv_mknod():fc +2012:AUE_NFS_REMOVE:nfsrv_remove():fd +2013:AUE_NFS_RMDIR:nfsrv_rmdir():fd +2014:AUE_NFS_RENAME:nfsrv_rename():fc,fd +2015:AUE_NFS_LINK:nfsrv_link():fc +2016:AUE_NFS_READDIR:nfsrv_readdir():fr +2017:AUE_NFS_READDIR_PLUS:nfsrv_readdirplus():fr +2018:AUE_NFS_STATFS:nfsrv_statfs():fa +2019:AUE_NFS_FSINFO:nfsrv_fsinfo():ot +2020:AUE_NFS_PATHCONF:nfsrv_pathconf():ot +2021:AUE_NFS_COMMIT:nfsrv_commit():ot +2022:AUE_NFS_NOOP:nfsrv_noop():no +# # OpenBSM-specific kernel events. # 43001:AUE_GETFSSTAT:getfsstat(2):fa
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201005081632.o48GWQQO022477>