1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
|
/* typetab.h --
* Copyright 2007-09,2011-12,2014 Red Hat Inc., Durham, North Carolina.
* All Rights Reserved.
*
* This library is free software; you can redistribute it and/or
* modify it under the terms of the GNU Lesser General Public
* License as published by the Free Software Foundation; either
* version 2.1 of the License, or (at your option) any later version.
*
* This library is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public
* License along with this library; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
*
* Authors:
* Steve Grubb <sgrubb@redhat.com>
*/
_S(AUPARSE_TYPE_UID, "auid" )
_S(AUPARSE_TYPE_UID, "uid" )
_S(AUPARSE_TYPE_UID, "euid" )
_S(AUPARSE_TYPE_UID, "suid" )
_S(AUPARSE_TYPE_UID, "fsuid" )
_S(AUPARSE_TYPE_UID, "ouid" )
_S(AUPARSE_TYPE_UID, "oauid" )
_S(AUPARSE_TYPE_UID, "iuid" )
_S(AUPARSE_TYPE_UID, "id" )
_S(AUPARSE_TYPE_UID, "inode_uid" )
_S(AUPARSE_TYPE_UID, "sauid" )
_S(AUPARSE_TYPE_UID, "obj_uid" )
_S(AUPARSE_TYPE_GID, "obj_gid" )
_S(AUPARSE_TYPE_GID, "gid" )
_S(AUPARSE_TYPE_GID, "egid" )
_S(AUPARSE_TYPE_GID, "sgid" )
_S(AUPARSE_TYPE_GID, "fsgid" )
_S(AUPARSE_TYPE_GID, "ogid" )
_S(AUPARSE_TYPE_GID, "igid" )
_S(AUPARSE_TYPE_GID, "inode_gid" )
_S(AUPARSE_TYPE_GID, "new_gid" )
_S(AUPARSE_TYPE_SYSCALL, "syscall" )
_S(AUPARSE_TYPE_ARCH, "arch" )
_S(AUPARSE_TYPE_EXIT, "exit" )
_S(AUPARSE_TYPE_ESCAPED, "path" )
_S(AUPARSE_TYPE_ESCAPED, "comm" )
_S(AUPARSE_TYPE_ESCAPED, "exe" )
_S(AUPARSE_TYPE_ESCAPED, "file" )
_S(AUPARSE_TYPE_ESCAPED, "name" )
_S(AUPARSE_TYPE_ESCAPED, "watch" )
_S(AUPARSE_TYPE_ESCAPED, "cwd" )
_S(AUPARSE_TYPE_ESCAPED, "cmd" )
_S(AUPARSE_TYPE_ESCAPED, "acct" )
_S(AUPARSE_TYPE_ESCAPED, "dir" )
_S(AUPARSE_TYPE_ESCAPED, "key" )
_S(AUPARSE_TYPE_ESCAPED, "vm" )
_S(AUPARSE_TYPE_ESCAPED, "old-disk" )
_S(AUPARSE_TYPE_ESCAPED, "new-disk" )
_S(AUPARSE_TYPE_ESCAPED, "old-fs" )
_S(AUPARSE_TYPE_ESCAPED, "new-fs" )
_S(AUPARSE_TYPE_ESCAPED, "device" )
_S(AUPARSE_TYPE_ESCAPED, "cgroup" )
_S(AUPARSE_TYPE_PERM, "perm" )
_S(AUPARSE_TYPE_PERM, "perm_mask" )
_S(AUPARSE_TYPE_MODE, "mode" )
_S(AUPARSE_TYPE_SOCKADDR, "saddr" )
//_S(AUPARSE_TYPE_FLAGS, "flags" )
_S(AUPARSE_TYPE_PROMISC, "prom" )
_S(AUPARSE_TYPE_PROMISC, "old_prom" )
_S(AUPARSE_TYPE_CAPABILITY, "capability" )
_S(AUPARSE_TYPE_SUCCESS, "res" )
_S(AUPARSE_TYPE_SUCCESS, "result" )
_S(AUPARSE_TYPE_A0, "a0" )
_S(AUPARSE_TYPE_A1, "a1" )
_S(AUPARSE_TYPE_A2, "a2" )
_S(AUPARSE_TYPE_A3, "a3" )
_S(AUPARSE_TYPE_SIGNAL, "sig" )
_S(AUPARSE_TYPE_LIST, "list" )
_S(AUPARSE_TYPE_TTY_DATA, "data" )
_S(AUPARSE_TYPE_SESSION, "ses" )
_S(AUPARSE_TYPE_CAP_BITMAP, "cap_pi" )
_S(AUPARSE_TYPE_CAP_BITMAP, "cap_pe" )
_S(AUPARSE_TYPE_CAP_BITMAP, "cap_pp" )
_S(AUPARSE_TYPE_CAP_BITMAP, "cap_fi" )
_S(AUPARSE_TYPE_CAP_BITMAP, "cap_fp" )
_S(AUPARSE_TYPE_CAP_BITMAP, "fp" )
_S(AUPARSE_TYPE_CAP_BITMAP, "fi" )
_S(AUPARSE_TYPE_CAP_BITMAP, "fe" )
_S(AUPARSE_TYPE_CAP_BITMAP, "old_pp" )
_S(AUPARSE_TYPE_CAP_BITMAP, "old_pi" )
_S(AUPARSE_TYPE_CAP_BITMAP, "old_pe" )
_S(AUPARSE_TYPE_CAP_BITMAP, "new_pp" )
_S(AUPARSE_TYPE_CAP_BITMAP, "new_pi" )
_S(AUPARSE_TYPE_CAP_BITMAP, "new_pe" )
_S(AUPARSE_TYPE_NFPROTO, "family" )
_S(AUPARSE_TYPE_ICMPTYPE, "icmptype" )
_S(AUPARSE_TYPE_PROTOCOL, "proto" )
_S(AUPARSE_TYPE_ADDR, "addr" )
#ifdef WITH_APPARMOR
_S(AUPARSE_TYPE_ESCAPED, "apparmor" )
_S(AUPARSE_TYPE_ESCAPED, "operation" )
_S(AUPARSE_TYPE_ESCAPED, "denied_mask" )
_S(AUPARSE_TYPE_ESCAPED, "info" )
_S(AUPARSE_TYPE_ESCAPED, "profile" )
_S(AUPARSE_TYPE_ESCAPED, "requested_mask")
#endif
_S(AUPARSE_TYPE_PERSONALITY, "per" )
_S(AUPARSE_TYPE_SECCOMP, "code" )
_S(AUPARSE_TYPE_ESCAPED, "old-rng" )
_S(AUPARSE_TYPE_ESCAPED, "new-rng" )
_S(AUPARSE_TYPE_OFLAG, "oflag" )
_S(AUPARSE_TYPE_ESCAPED, "ocomm" )
_S(AUPARSE_TYPE_MMAP, "flags" )
_S(AUPARSE_TYPE_SIGNAL, "sigev_signo" )
_S(AUPARSE_TYPE_MAC_LABEL, "subj" )
_S(AUPARSE_TYPE_MAC_LABEL, "obj" )
_S(AUPARSE_TYPE_MAC_LABEL, "scontext" )
_S(AUPARSE_TYPE_MAC_LABEL, "tcontext" )
_S(AUPARSE_TYPE_MAC_LABEL, "vm-ctx" )
_S(AUPARSE_TYPE_MAC_LABEL, "img-ctx" )
_S(AUPARSE_TYPE_PROCTITLE, "proctitle" )
_S(AUPARSE_TYPE_ESCAPED, "grp" )
_S(AUPARSE_TYPE_ESCAPED, "new_group" )
|
