Imported Upstream version 2.4.3
[platform/upstream/audit.git] / auparse / typetab.h
1 /* typetab.h --
2  * Copyright 2007-09,2011-12,2014 Red Hat Inc., Durham, North Carolina.
3  * All Rights Reserved.
4  *
5  * This library is free software; you can redistribute it and/or
6  * modify it under the terms of the GNU Lesser General Public
7  * License as published by the Free Software Foundation; either
8  * version 2.1 of the License, or (at your option) any later version.
9  *
10  * This library is distributed in the hope that it will be useful,
11  * but WITHOUT ANY WARRANTY; without even the implied warranty of
12  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
13  * Lesser General Public License for more details.
14  *
15  * You should have received a copy of the GNU Lesser General Public
16  * License along with this library; if not, write to the Free Software
17  * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
18  *
19  * Authors:
20  *      Steve Grubb <sgrubb@redhat.com>
21  */
22
23
24 _S(AUPARSE_TYPE_UID,            "auid"          )
25 _S(AUPARSE_TYPE_UID,            "uid"           )
26 _S(AUPARSE_TYPE_UID,            "euid"          )
27 _S(AUPARSE_TYPE_UID,            "suid"          )
28 _S(AUPARSE_TYPE_UID,            "fsuid"         )
29 _S(AUPARSE_TYPE_UID,            "ouid"          )
30 _S(AUPARSE_TYPE_UID,            "oauid"         )
31 _S(AUPARSE_TYPE_UID,            "iuid"          )
32 _S(AUPARSE_TYPE_UID,            "id"            )
33 _S(AUPARSE_TYPE_UID,            "inode_uid"     )
34 _S(AUPARSE_TYPE_UID,            "sauid"         )
35 _S(AUPARSE_TYPE_UID,            "obj_uid"       )
36 _S(AUPARSE_TYPE_GID,            "obj_gid"       )
37 _S(AUPARSE_TYPE_GID,            "gid"           )
38 _S(AUPARSE_TYPE_GID,            "egid"          )
39 _S(AUPARSE_TYPE_GID,            "sgid"          )
40 _S(AUPARSE_TYPE_GID,            "fsgid"         )
41 _S(AUPARSE_TYPE_GID,            "ogid"          )
42 _S(AUPARSE_TYPE_GID,            "igid"          )
43 _S(AUPARSE_TYPE_GID,            "inode_gid"     )
44 _S(AUPARSE_TYPE_GID,            "new_gid"       )
45 _S(AUPARSE_TYPE_SYSCALL,        "syscall"       )
46 _S(AUPARSE_TYPE_ARCH,           "arch"          )
47 _S(AUPARSE_TYPE_EXIT,           "exit"          )
48 _S(AUPARSE_TYPE_ESCAPED,        "path"          )
49 _S(AUPARSE_TYPE_ESCAPED,        "comm"          )
50 _S(AUPARSE_TYPE_ESCAPED,        "exe"           )
51 _S(AUPARSE_TYPE_ESCAPED,        "file"          )
52 _S(AUPARSE_TYPE_ESCAPED,        "name"          )
53 _S(AUPARSE_TYPE_ESCAPED,        "watch"         )
54 _S(AUPARSE_TYPE_ESCAPED,        "cwd"           )
55 _S(AUPARSE_TYPE_ESCAPED,        "cmd"           )
56 _S(AUPARSE_TYPE_ESCAPED,        "acct"          )
57 _S(AUPARSE_TYPE_ESCAPED,        "dir"           )
58 _S(AUPARSE_TYPE_ESCAPED,        "key"           )
59 _S(AUPARSE_TYPE_ESCAPED,        "vm"            )
60 _S(AUPARSE_TYPE_ESCAPED,        "old-disk"      )
61 _S(AUPARSE_TYPE_ESCAPED,        "new-disk"      )
62 _S(AUPARSE_TYPE_ESCAPED,        "old-fs"        )
63 _S(AUPARSE_TYPE_ESCAPED,        "new-fs"        )
64 _S(AUPARSE_TYPE_ESCAPED,        "device"        )
65 _S(AUPARSE_TYPE_ESCAPED,        "cgroup"        )
66 _S(AUPARSE_TYPE_PERM,           "perm"          )
67 _S(AUPARSE_TYPE_PERM,           "perm_mask"     )
68 _S(AUPARSE_TYPE_MODE,           "mode"          )
69 _S(AUPARSE_TYPE_SOCKADDR,       "saddr"         )
70 //_S(AUPARSE_TYPE_FLAGS,                "flags"         )
71 _S(AUPARSE_TYPE_PROMISC,        "prom"          )
72 _S(AUPARSE_TYPE_PROMISC,        "old_prom"      )
73 _S(AUPARSE_TYPE_CAPABILITY,     "capability"    )
74 _S(AUPARSE_TYPE_SUCCESS,        "res"           )
75 _S(AUPARSE_TYPE_SUCCESS,        "result"        )
76 _S(AUPARSE_TYPE_A0,             "a0"            )
77 _S(AUPARSE_TYPE_A1,             "a1"            )
78 _S(AUPARSE_TYPE_A2,             "a2"            )
79 _S(AUPARSE_TYPE_A3,             "a3"            )
80 _S(AUPARSE_TYPE_SIGNAL,         "sig"           )
81 _S(AUPARSE_TYPE_LIST,           "list"          )
82 _S(AUPARSE_TYPE_TTY_DATA,       "data"          )
83 _S(AUPARSE_TYPE_SESSION,        "ses"           )
84 _S(AUPARSE_TYPE_CAP_BITMAP,     "cap_pi"        )
85 _S(AUPARSE_TYPE_CAP_BITMAP,     "cap_pe"        )
86 _S(AUPARSE_TYPE_CAP_BITMAP,     "cap_pp"        )
87 _S(AUPARSE_TYPE_CAP_BITMAP,     "cap_fi"        )
88 _S(AUPARSE_TYPE_CAP_BITMAP,     "cap_fp"        )
89 _S(AUPARSE_TYPE_CAP_BITMAP,     "fp"            )
90 _S(AUPARSE_TYPE_CAP_BITMAP,     "fi"            )
91 _S(AUPARSE_TYPE_CAP_BITMAP,     "fe"            )
92 _S(AUPARSE_TYPE_CAP_BITMAP,     "old_pp"        )
93 _S(AUPARSE_TYPE_CAP_BITMAP,     "old_pi"        )
94 _S(AUPARSE_TYPE_CAP_BITMAP,     "old_pe"        )
95 _S(AUPARSE_TYPE_CAP_BITMAP,     "new_pp"        )
96 _S(AUPARSE_TYPE_CAP_BITMAP,     "new_pi"        )
97 _S(AUPARSE_TYPE_CAP_BITMAP,     "new_pe"        )
98 _S(AUPARSE_TYPE_NFPROTO,        "family"        )
99 _S(AUPARSE_TYPE_ICMPTYPE,       "icmptype"      )
100 _S(AUPARSE_TYPE_PROTOCOL,       "proto"         )
101 _S(AUPARSE_TYPE_ADDR,           "addr"          )
102 #ifdef WITH_APPARMOR
103 _S(AUPARSE_TYPE_ESCAPED,        "apparmor"      )
104 _S(AUPARSE_TYPE_ESCAPED,        "operation"     )
105 _S(AUPARSE_TYPE_ESCAPED,        "denied_mask"   )
106 _S(AUPARSE_TYPE_ESCAPED,        "info"          )
107 _S(AUPARSE_TYPE_ESCAPED,        "profile"       )
108 _S(AUPARSE_TYPE_ESCAPED,        "requested_mask")
109 #endif
110 _S(AUPARSE_TYPE_PERSONALITY,    "per"           )
111 _S(AUPARSE_TYPE_SECCOMP,        "code"          )
112 _S(AUPARSE_TYPE_ESCAPED,        "old-rng"       )
113 _S(AUPARSE_TYPE_ESCAPED,        "new-rng"       )
114 _S(AUPARSE_TYPE_OFLAG,          "oflag"         )
115 _S(AUPARSE_TYPE_ESCAPED,        "ocomm"         )
116 _S(AUPARSE_TYPE_MMAP,           "flags"         )
117 _S(AUPARSE_TYPE_SIGNAL,         "sigev_signo"   )
118 _S(AUPARSE_TYPE_MAC_LABEL,      "subj"          )
119 _S(AUPARSE_TYPE_MAC_LABEL,      "obj"           )
120 _S(AUPARSE_TYPE_MAC_LABEL,      "scontext"      )
121 _S(AUPARSE_TYPE_MAC_LABEL,      "tcontext"      )
122 _S(AUPARSE_TYPE_MAC_LABEL,      "vm-ctx"        )
123 _S(AUPARSE_TYPE_MAC_LABEL,      "img-ctx"       )
124 _S(AUPARSE_TYPE_PROCTITLE,      "proctitle"     )
125 _S(AUPARSE_TYPE_ESCAPED,        "grp"           )
126 _S(AUPARSE_TYPE_ESCAPED,        "new_group"     )
127