Print this page
NEX-13644 File access audit logging
Reviewed by: Gordon Ross <gordon.ross@nexenta.com>
Reviewed by: Roman Strashkin <roman.strashkin@nexenta.com>
Reviewed by: Saso Kiselkov <saso.kiselkov@nexenta.com>
Reviewed by: Rick McNeal <rick.mcneal@nexenta.com>
Reviewed by: Yuri Pankov <yuri.pankov@nexenta.com>

*** 1,9 **** --- 1,11 ---- # # Copyright 2006 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # + # Copyright 2018 Nexenta Systems, Inc. All rights reserved. + # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License (the "License"). # You may not use this file except in compliance with the License.
*** 19,34 **** # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # - # ident "%Z%%M% %I% %E% SMI" - # # User Level Class Masks # - # Developers: If you change this file you must also edit audit.h. - # # "Meta-classes" can be created; these are supersets composed of multiple base # classes, and thus will have more than 1 bit in its mask. See "ad", "all", # "am", and "pc" below for examples. # # The "no" (invalid) class below is commonly (but not exclusively) used in --- 21,32 ----
*** 64,72 **** --- 62,71 ---- 0x00300000:pc:process (meta-class) 0x00400000:xp:X - privileged/administrative operations 0x00800000:xc:X - object create/destroy 0x01000000:xs:X - operations that always silently fail, if bad 0x01c00000:xx:X - all X events (meta-class) + 0x02000000:sa:SACL-based File Access Auditing 0x20000000:io:ioctl 0x40000000:ex:exec 0x80000000:ot:other 0xffffffff:all:all classes (meta-class)