Print this page
NEX-13644 File access audit logging
Reviewed by: Gordon Ross <gordon.ross@nexenta.com>
Reviewed by: Roman Strashkin <roman.strashkin@nexenta.com>
Reviewed by: Saso Kiselkov <saso.kiselkov@nexenta.com>
Reviewed by: Rick McNeal <rick.mcneal@nexenta.com>
Reviewed by: Yuri Pankov <yuri.pankov@nexenta.com>
        
*** 19,28 ****
--- 19,30 ----
   * CDDL HEADER END
   */
  /*
   * Copyright 2010 Sun Microsystems, Inc.  All rights reserved.
   * Use is subject to license terms.
+  *
+  * Copyright 2018 Nexenta Systems, Inc.  All rights reserved.
   */
  
  /*
   * Solaris Audit Token Table.
   */
*** 195,204 ****
--- 197,210 ----
          table_initx(AUT_IN_ADDR_EX, "ip address", "ip_address",
              ip_addr_ex_token, T_ELEMENT);
          table_init(AUT_SOCKET_EX, "socket", socket_ex_token, T_ENCLOSED);
          table_init(AUT_TID, "tid", tid_token, T_EXTENDED);
  
+         table_init(AUT_ACCESS_MASK, "access mask", access_mask_token,
+             T_ELEMENT);
+         table_init(AUT_WSID, "Windows SID", wsid_token, T_ELEMENT);
+ 
  #ifdef _PRAUDIT
          /*
           * Done with tokens above here. Now do remaining tags.
           */
          table_init(TAG_AUID, "audit-uid", pa_pw_uid, T_ATTRIBUTE);
*** 304,310 ****
--- 310,318 ----
          table_init(TAG_ARBTYPE, "type", NOFUNC, T_ATTRIBUTE);
          table_init(TAG_ARBCOUNT, "count", NOFUNC, T_ATTRIBUTE);
  
          table_init(TAG_HOSTID, "host", NOFUNC, T_ATTRIBUTE);
          table_init(TAG_USERNAME, "username", pa_adr_string, T_ATTRIBUTE);
+         table_init(TAG_WSID, "wsid", NOFUNC, T_ATTRIBUTE);
+ 
  #endif  /* _PRAUDIT */
  }