summaryrefslogtreecommitdiffstats
path: root/freebsd/sys/bsm/audit.h
diff options
context:
space:
mode:
Diffstat (limited to 'freebsd/sys/bsm/audit.h')
-rw-r--r--freebsd/sys/bsm/audit.h18
1 files changed, 18 insertions, 0 deletions
diff --git a/freebsd/sys/bsm/audit.h b/freebsd/sys/bsm/audit.h
index 7efc93a1..aa776057 100644
--- a/freebsd/sys/bsm/audit.h
+++ b/freebsd/sys/bsm/audit.h
@@ -1,7 +1,13 @@
/*-
* Copyright (c) 2005-2009 Apple Inc.
+ * Copyright (c) 2016 Robert N. M. Watson
* All rights reserved.
*
+ * Portions of this software were developed by BAE Systems, the University of
+ * Cambridge Computer Laboratory, and Memorial University under DARPA/AFRL
+ * contract FA8650-15-C-7558 ("CADETS"), as part of the DARPA Transparent
+ * Computing (TC) research program.
+ *
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
@@ -125,6 +131,8 @@
#define A_SETQCTRL 36
#define A_GETCOND 37
#define A_SETCOND 38
+#define A_GETEVENT 39 /* Get audit event-to-name mapping. */
+#define A_SETEVENT 40 /* Set audit event-to-name mapping. */
/*
* Audit policy controls.
@@ -301,6 +309,16 @@ struct au_evclass_map {
typedef struct au_evclass_map au_evclass_map_t;
/*
+ * Event-to-name mapping.
+ */
+#define EVNAMEMAP_NAME_SIZE 64
+struct au_evname_map {
+ au_event_t en_number;
+ char en_name[EVNAMEMAP_NAME_SIZE];
+};
+typedef struct au_evname_map au_evname_map_t;
+
+/*
* Audit system calls.
*/
#if !defined(_KERNEL) && !defined(KERNEL)