lib/fieldtab.h

   1 /* fieldtab.h --
   2  * Copyright 2005-07 Red Hat Inc., Durham, North Carolina.
   3  * All Rights Reserved.
   4  *
   5  * This library is free software; you can redistribute it and/or
   6  * modify it under the terms of the GNU Lesser General Public
   7  * License as published by the Free Software Foundation; either
   8  * version 2.1 of the License, or (at your option) any later version.
   9  *
  10  * This library is distributed in the hope that it will be useful,
  11  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  12  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  13  * Lesser General Public License for more details.
  14  *
  15  * You should have received a copy of the GNU Lesser General Public
  16  * License along with this library; if not, write to the Free Software
  17  * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
  18  *
  19  * Authors:
  20  *      Steve Grubb <sgrubb@redhat.com>
  21  */
  22
  23 _S(AUDIT_PID,          "pid"          )
  24 _S(AUDIT_UID,          "uid"          )
  25 _S(AUDIT_EUID,         "euid"         )
  26 _S(AUDIT_SUID,         "suid"         )
  27 _S(AUDIT_FSUID,        "fsuid"        )
  28 _S(AUDIT_GID,          "gid"          )
  29 _S(AUDIT_EGID,         "egid"         )
  30 _S(AUDIT_SGID,         "sgid"         )
  31 _S(AUDIT_FSGID,        "fsgid"        )
  32 _S(AUDIT_LOGINUID,     "auid"         )
  33 _S(AUDIT_LOGINUID,     "loginuid"     )
  34 _S(AUDIT_PERS,         "pers"         )
  35 _S(AUDIT_ARCH,         "arch"         )
  36 _S(AUDIT_MSGTYPE,      "msgtype"      )
  37 _S(AUDIT_SUBJ_USER,    "subj_user"    )
  38 _S(AUDIT_SUBJ_ROLE,    "subj_role"    )
  39 _S(AUDIT_SUBJ_TYPE,    "subj_type"    )
  40 _S(AUDIT_SUBJ_SEN,     "subj_sen"     )
  41 _S(AUDIT_SUBJ_CLR,     "subj_clr"     )
  42 _S(AUDIT_PPID,         "ppid"         )
  43 _S(AUDIT_OBJ_USER,     "obj_user"     )
  44 _S(AUDIT_OBJ_ROLE,     "obj_role"     )
  45 _S(AUDIT_OBJ_TYPE,     "obj_type"     )
  46 _S(AUDIT_OBJ_LEV_LOW,  "obj_lev_low"  )
  47 _S(AUDIT_OBJ_LEV_HIGH, "obj_lev_high" )
  48
  49 _S(AUDIT_DEVMAJOR,     "devmajor"     )
  50 _S(AUDIT_DEVMINOR,     "devminor"     )
  51 _S(AUDIT_INODE,        "inode"        )
  52 _S(AUDIT_EXIT,         "exit"         )
  53 _S(AUDIT_SUCCESS,      "success"      )
  54 _S(AUDIT_WATCH,        "path"         )
  55 _S(AUDIT_PERM,         "perm"         )
  56 _S(AUDIT_DIR,          "dir"          )
  57 _S(AUDIT_FILETYPE,     "filetype"     )
  58 _S(AUDIT_OBJ_UID,      "obj_uid"      )
  59 _S(AUDIT_OBJ_GID,      "obj_gid"      )
  60 _S(AUDIT_FIELD_COMPARE, "field_compare" )
  61
  62 _S(AUDIT_ARG0,         "a0"           )
  63 _S(AUDIT_ARG1,         "a1"           )
  64 _S(AUDIT_ARG2,         "a2"           )
  65 _S(AUDIT_ARG3,         "a3"           )
  66
  67 _S(AUDIT_FILTERKEY,    "key"          )
  68