contrib/openbsm (svn merge) and src/sys/{bsm,security/audit} (manual merge). Add libauditd build parts and add to auditd's linkage; force libbsm to build before libauditd. OpenBSM history for imported revisions below for reference. MFC after: 1 month Sponsored by: Apple Inc. Obtained from: TrustedBSD Project OpenBSM 1.1 alpha 4 - With the addition of BSM error number mapping, we also need to map the local error number passed to audit_submit(3) to a BSM error number, rather than have the caller perform that conversion. - Reallocate user audit events to avoid collisions with Solaris; adopt a more formal allocation scheme, and add some events allocated in Solaris that will be of immediate use on other platforms. - Add an event for Calife. - Add au_strerror(3), which allows generating strings for BSM errors directly, rather than requiring applications to map to the local error space, which might not be able to entirely represent the BSM error number space. - Major auditd rewrite for launchd(8) support. Add libauditd library that is shared between launchd and auditd. - Add AUDIT_TRIGGER_INITIALIZE trigger (sent via 'audit -i') for (re)starting auditing under launchd(8) on Mac OS X. - Add 'current' symlink to active audit trail. - Add crash recovery of previous audit trail file when detected on audit startup that it has not been properly terminated. - Add the event AUE_audit_recovery to indicated when an audit trail file has been recovered from not being properly terminated. This event is stored in the new audit trail file and includes the path of recovered audit trail file. - Mac OS X and FreeBSD dependent code in auditd.c is separated into auditd_darwin.c and auditd_fbsd.c files. - Add an event for the posix_spawn(2) and fsgetpath(2) Mac OS X system calls. - For Mac OS X, we use ASL(3) instead of syslog(3) for logging. - Add support for NOTICE level logging. OpenBSM 1.1 alpha 3 - Add two new functions, au_bsm_to_errno() and au_errno_to_bsm(), to map between BSM error numbers (largely the Solaris definitions) and local errno(2) values for 32-bit and 64-bit return tokens. This is required as operating systems don't agree on some of the values of more recent error numbers. - Fix a bug how au_to_exec_args(3) and au_to_exec_env(3) calculates the total size for the token. This buge. - Deprecated Darwin constants, such as TRAILER_PAD_MAGIC, removed.
216 lines
8.2 KiB
C
216 lines
8.2 KiB
C
/*-
|
|
* Copyright (c) 2008 Apple Inc.
|
|
* All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
* 3. Neither the name of Apple Inc. ("Apple") nor the names of
|
|
* its contributors may be used to endorse or promote products derived
|
|
* from this software without specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY APPLE AND ITS CONTRIBUTORS "AS IS" AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL APPLE OR ITS CONTRIBUTORS BE LIABLE FOR
|
|
* ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
|
|
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
|
|
* IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
|
|
* POSSIBILITY OF SUCH DAMAGE.
|
|
*
|
|
* P4: //depot/projects/trustedbsd/openbsm/sys/bsm/audit_errno.h#4
|
|
* $FreeBSD$
|
|
*/
|
|
|
|
#ifndef _BSM_AUDIT_ERRNO_H_
|
|
#define _BSM_AUDIT_ERRNO_H_
|
|
|
|
/*
|
|
* For the purposes of portable encoding, we convert between local error
|
|
* numbers and Solaris error numbers (as well as some extensions for error
|
|
* numbers that don't exist in Solaris). Although the first 35 or so
|
|
* constants are the same across all OS's, we don't handle that in any
|
|
* special way.
|
|
*
|
|
* When adding constants here, also add them to bsm_errno.c.
|
|
*/
|
|
#define BSM_ESUCCESS 0
|
|
#define BSM_EPERM 1
|
|
#define BSM_ENOENT 2
|
|
#define BSM_ESRCH 3
|
|
#define BSM_EINTR 4
|
|
#define BSM_EIO 5
|
|
#define BSM_ENXIO 6
|
|
#define BSM_E2BIG 7
|
|
#define BSM_ENOEXEC 8
|
|
#define BSM_EBADF 9
|
|
#define BSM_ECHILD 10
|
|
#define BSM_EAGAIN 11
|
|
#define BSM_ENOMEM 12
|
|
#define BSM_EACCES 13
|
|
#define BSM_EFAULT 14
|
|
#define BSM_ENOTBLK 15
|
|
#define BSM_EBUSY 16
|
|
#define BSM_EEXIST 17
|
|
#define BSM_EXDEV 18
|
|
#define BSM_ENODEV 19
|
|
#define BSM_ENOTDIR 20
|
|
#define BSM_EISDIR 21
|
|
#define BSM_EINVAL 22
|
|
#define BSM_ENFILE 23
|
|
#define BSM_EMFILE 24
|
|
#define BSM_ENOTTY 25
|
|
#define BSM_ETXTBSY 26
|
|
#define BSM_EFBIG 27
|
|
#define BSM_ENOSPC 28
|
|
#define BSM_ESPIPE 29
|
|
#define BSM_EROFS 30
|
|
#define BSM_EMLINK 31
|
|
#define BSM_EPIPE 32
|
|
#define BSM_EDOM 33
|
|
#define BSM_ERANGE 34
|
|
#define BSM_ENOMSG 35
|
|
#define BSM_EIDRM 36
|
|
#define BSM_ECHRNG 37 /* Solaris/Linux-specific. */
|
|
#define BSM_EL2NSYNC 38 /* Solaris/Linux-specific. */
|
|
#define BSM_EL3HLT 39 /* Solaris/Linux-specific. */
|
|
#define BSM_EL3RST 40 /* Solaris/Linux-specific. */
|
|
#define BSM_ELNRNG 41 /* Solaris/Linux-specific. */
|
|
#define BSM_EUNATCH 42 /* Solaris/Linux-specific. */
|
|
#define BSM_ENOCSI 43 /* Solaris/Linux-specific. */
|
|
#define BSM_EL2HLT 44 /* Solaris/Linux-specific. */
|
|
#define BSM_EDEADLK 45
|
|
#define BSM_ENOLCK 46
|
|
#define BSM_ECANCELED 47
|
|
#define BSM_ENOTSUP 48
|
|
#define BSM_EDQUOT 49
|
|
#define BSM_EBADE 50 /* Solaris/Linux-specific. */
|
|
#define BSM_EBADR 51 /* Solaris/Linux-specific. */
|
|
#define BSM_EXFULL 52 /* Solaris/Linux-specific. */
|
|
#define BSM_ENOANO 53 /* Solaris/Linux-specific. */
|
|
#define BSM_EBADRQC 54 /* Solaris/Linux-specific. */
|
|
#define BSM_EBADSLT 55 /* Solaris/Linux-specific. */
|
|
#define BSM_EDEADLOCK 56 /* Solaris-specific. */
|
|
#define BSM_EBFONT 57 /* Solaris/Linux-specific. */
|
|
#define BSM_EOWNERDEAD 58 /* Solaris/Linux-specific. */
|
|
#define BSM_ENOTRECOVERABLE 59 /* Solaris/Linux-specific. */
|
|
#define BSM_ENOSTR 60 /* Solaris/Darwin/Linux-specific. */
|
|
#define BSM_ENODATA 61 /* Solaris/Darwin/Linux-specific. */
|
|
#define BSM_ETIME 62 /* Solaris/Darwin/Linux-specific. */
|
|
#define BSM_ENOSR 63 /* Solaris/Darwin/Linux-specific. */
|
|
#define BSM_ENONET 64 /* Solaris/Linux-specific. */
|
|
#define BSM_ENOPKG 65 /* Solaris/Linux-specific. */
|
|
#define BSM_EREMOTE 66
|
|
#define BSM_ENOLINK 67
|
|
#define BSM_EADV 68 /* Solaris/Linux-specific. */
|
|
#define BSM_ESRMNT 69 /* Solaris/Linux-specific. */
|
|
#define BSM_ECOMM 70 /* Solaris/Linux-specific. */
|
|
#define BSM_EPROTO 71
|
|
#define BSM_ELOCKUNMAPPED 72 /* Solaris-specific. */
|
|
#define BSM_ENOTACTIVE 73 /* Solaris-specific. */
|
|
#define BSM_EMULTIHOP 74
|
|
#define BSM_EBADMSG 77
|
|
#define BSM_ENAMETOOLONG 78
|
|
#define BSM_EOVERFLOW 79
|
|
#define BSM_ENOTUNIQ 80 /* Solaris/Linux-specific. */
|
|
#define BSM_EBADFD 81 /* Solaris/Linux-specific. */
|
|
#define BSM_EREMCHG 82 /* Solaris/Linux-specific. */
|
|
#define BSM_ELIBACC 83 /* Solaris/Linux-specific. */
|
|
#define BSM_ELIBBAD 84 /* Solaris/Linux-specific. */
|
|
#define BSM_ELIBSCN 85 /* Solaris/Linux-specific. */
|
|
#define BSM_ELIBMAX 86 /* Solaris/Linux-specific. */
|
|
#define BSM_ELIBEXEC 87 /* Solaris/Linux-specific. */
|
|
#define BSM_EILSEQ 88
|
|
#define BSM_ENOSYS 89
|
|
#define BSM_ELOOP 90
|
|
#define BSM_ERESTART 91
|
|
#define BSM_ESTRPIPE 92 /* Solaris/Linux-specific. */
|
|
#define BSM_ENOTEMPTY 93
|
|
#define BSM_EUSERS 94
|
|
#define BSM_ENOTSOCK 95
|
|
#define BSM_EDESTADDRREQ 96
|
|
#define BSM_EMSGSIZE 97
|
|
#define BSM_EPROTOTYPE 98
|
|
#define BSM_ENOPROTOOPT 99
|
|
#define BSM_EPROTONOSUPPORT 120
|
|
#define BSM_ESOCKTNOSUPPORT 121
|
|
#define BSM_EOPNOTSUPP 122
|
|
#define BSM_EPFNOSUPPORT 123
|
|
#define BSM_EAFNOSUPPORT 124
|
|
#define BSM_EADDRINUSE 125
|
|
#define BSM_EADDRNOTAVAIL 126
|
|
#define BSM_ENETDOWN 127
|
|
#define BSM_ENETUNREACH 128
|
|
#define BSM_ENETRESET 129
|
|
#define BSM_ECONNABORTED 130
|
|
#define BSM_ECONNRESET 131
|
|
#define BSM_ENOBUFS 132
|
|
#define BSM_EISCONN 133
|
|
#define BSM_ENOTCONN 134
|
|
#define BSM_ESHUTDOWN 143
|
|
#define BSM_ETOOMANYREFS 144
|
|
#define BSM_ETIMEDOUT 145
|
|
#define BSM_ECONNREFUSED 146
|
|
#define BSM_EHOSTDOWN 147
|
|
#define BSM_EHOSTUNREACH 148
|
|
#define BSM_EALREADY 149
|
|
#define BSM_EINPROGRESS 150
|
|
#define BSM_ESTALE 151
|
|
|
|
/*
|
|
* OpenBSM constants for error numbers not defined in Solaris. In the event
|
|
* that these errors are added to Solaris, we will deprecate the OpenBSM
|
|
* numbers in the same way we do for audit event constants.
|
|
*
|
|
* ELAST doesn't get a constant in the BSM space.
|
|
*/
|
|
#define BSM_EPROCLIM 190 /* FreeBSD/Darwin-specific. */
|
|
#define BSM_EBADRPC 191 /* FreeBSD/Darwin-specific. */
|
|
#define BSM_ERPCMISMATCH 192 /* FreeBSD/Darwin-specific. */
|
|
#define BSM_EPROGUNAVAIL 193 /* FreeBSD/Darwin-specific. */
|
|
#define BSM_EPROGMISMATCH 194 /* FreeBSD/Darwin-specific. */
|
|
#define BSM_EPROCUNAVAIL 195 /* FreeBSD/Darwin-specific. */
|
|
#define BSM_EFTYPE 196 /* FreeBSD/Darwin-specific. */
|
|
#define BSM_EAUTH 197 /* FreeBSD/Darwin-specific. */
|
|
#define BSM_ENEEDAUTH 198 /* FreeBSD/Darwin-specific. */
|
|
#define BSM_ENOATTR 199 /* FreeBSD/Darwin-specific. */
|
|
#define BSM_EDOOFUS 200 /* FreeBSD-specific. */
|
|
#define BSM_EJUSTRETURN 201 /* FreeBSD-specific. */
|
|
#define BSM_ENOIOCTL 202 /* FreeBSD-specific. */
|
|
#define BSM_EDIRIOCTL 203 /* FreeBSD-specific. */
|
|
#define BSM_EPWROFF 204 /* Darwin-specific. */
|
|
#define BSM_EDEVERR 205 /* Darwin-specific. */
|
|
#define BSM_EBADEXEC 206 /* Darwin-specific. */
|
|
#define BSM_EBADARCH 207 /* Darwin-specific. */
|
|
#define BSM_ESHLIBVERS 208 /* Darwin-specific. */
|
|
#define BSM_EBADMACHO 209 /* Darwin-specific. */
|
|
#define BSM_EPOLICY 210 /* Darwin-specific. */
|
|
#define BSM_EDOTDOT 211 /* Linux-specific. */
|
|
#define BSM_EUCLEAN 212 /* Linux-specific. */
|
|
#define BSM_ENOTNAM 213 /* Linux(Xenix?)-specific. */
|
|
#define BSM_ENAVAIL 214 /* Linux(Xenix?)-specific. */
|
|
#define BSM_EISNAM 215 /* Linux(Xenix?)-specific. */
|
|
#define BSM_EREMOTEIO 216 /* Linux-specific. */
|
|
#define BSM_ENOMEDIUM 217 /* Linux-specific. */
|
|
#define BSM_EMEDIUMTYPE 218 /* Linux-specific. */
|
|
#define BSM_ENOKEY 219 /* Linux-specific. */
|
|
#define BSM_EKEYEXPIRED 220 /* Linux-specific. */
|
|
#define BSM_EKEYREVOKED 221 /* Linux-specific. */
|
|
#define BSM_EKEYREJECTED 222 /* Linux-specific. */
|
|
|
|
/*
|
|
* In the event that OpenBSM doesn't have a file representation of a local
|
|
* error number, use this.
|
|
*/
|
|
#define BSM_UNKNOWNERR 250 /* OpenBSM-specific. */
|
|
|
|
#endif /* !_BSM_AUDIT_ERRNO_H_ */
|