NEX-13644 File access audit logging
Reviewed by: Gordon Ross <gordon.ross@nexenta.com>
Reviewed by: Roman Strashkin <roman.strashkin@nexenta.com>
Reviewed by: Saso Kiselkov <saso.kiselkov@nexenta.com>
Reviewed by: Rick McNeal <rick.mcneal@nexenta.com>
Reviewed by: Yuri Pankov <yuri.pankov@nexenta.com>

@@ -19,10 +19,12 @@
  * CDDL HEADER END
  */
 /*
  * Copyright 2010 Sun Microsystems, Inc.  All rights reserved.
  * Use is subject to license terms.
+ *
+ * Copyright 2018 Nexenta Systems, Inc.  All rights reserved.
  */
 
 /*
  * Solaris Audit Token Table.
  */

@@ -195,10 +197,14 @@
         table_initx(AUT_IN_ADDR_EX, "ip address", "ip_address",
             ip_addr_ex_token, T_ELEMENT);
         table_init(AUT_SOCKET_EX, "socket", socket_ex_token, T_ENCLOSED);
         table_init(AUT_TID, "tid", tid_token, T_EXTENDED);
 
+        table_init(AUT_ACCESS_MASK, "access mask", access_mask_token,
+            T_ELEMENT);
+        table_init(AUT_WSID, "Windows SID", wsid_token, T_ELEMENT);
+
 #ifdef _PRAUDIT
         /*
          * Done with tokens above here. Now do remaining tags.
          */
         table_init(TAG_AUID, "audit-uid", pa_pw_uid, T_ATTRIBUTE);

@@ -304,7 +310,9 @@
         table_init(TAG_ARBTYPE, "type", NOFUNC, T_ATTRIBUTE);
         table_init(TAG_ARBCOUNT, "count", NOFUNC, T_ATTRIBUTE);
 
         table_init(TAG_HOSTID, "host", NOFUNC, T_ATTRIBUTE);
         table_init(TAG_USERNAME, "username", pa_adr_string, T_ATTRIBUTE);
+        table_init(TAG_WSID, "wsid", NOFUNC, T_ATTRIBUTE);
+
 #endif  /* _PRAUDIT */
 }