Line data Source code
1 4002 : const char *audit_type_to_string(int type) {
2 4002 : switch(type) {
3 2 : case AUDIT_GET: return "GET";
4 2 : case AUDIT_SET: return "SET";
5 2 : case AUDIT_LIST: return "LIST";
6 2 : case AUDIT_ADD: return "ADD";
7 2 : case AUDIT_DEL: return "DEL";
8 2 : case AUDIT_USER: return "USER";
9 2 : case AUDIT_LOGIN: return "LOGIN";
10 2 : case AUDIT_WATCH_INS: return "WATCH_INS";
11 2 : case AUDIT_WATCH_REM: return "WATCH_REM";
12 2 : case AUDIT_WATCH_LIST: return "WATCH_LIST";
13 2 : case AUDIT_SIGNAL_INFO: return "SIGNAL_INFO";
14 2 : case AUDIT_ADD_RULE: return "ADD_RULE";
15 2 : case AUDIT_DEL_RULE: return "DEL_RULE";
16 2 : case AUDIT_LIST_RULES: return "LIST_RULES";
17 2 : case AUDIT_TRIM: return "TRIM";
18 2 : case AUDIT_MAKE_EQUIV: return "MAKE_EQUIV";
19 2 : case AUDIT_TTY_GET: return "TTY_GET";
20 2 : case AUDIT_TTY_SET: return "TTY_SET";
21 2 : case AUDIT_SET_FEATURE: return "SET_FEATURE";
22 2 : case AUDIT_GET_FEATURE: return "GET_FEATURE";
23 2 : case AUDIT_USER_AUTH: return "USER_AUTH";
24 2 : case AUDIT_USER_ACCT: return "USER_ACCT";
25 2 : case AUDIT_USER_MGMT: return "USER_MGMT";
26 2 : case AUDIT_CRED_ACQ: return "CRED_ACQ";
27 2 : case AUDIT_CRED_DISP: return "CRED_DISP";
28 2 : case AUDIT_USER_START: return "USER_START";
29 2 : case AUDIT_USER_END: return "USER_END";
30 2 : case AUDIT_USER_AVC: return "USER_AVC";
31 2 : case AUDIT_USER_CHAUTHTOK: return "USER_CHAUTHTOK";
32 2 : case AUDIT_USER_ERR: return "USER_ERR";
33 2 : case AUDIT_CRED_REFR: return "CRED_REFR";
34 2 : case AUDIT_USYS_CONFIG: return "USYS_CONFIG";
35 2 : case AUDIT_USER_LOGIN: return "USER_LOGIN";
36 2 : case AUDIT_USER_LOGOUT: return "USER_LOGOUT";
37 2 : case AUDIT_ADD_USER: return "ADD_USER";
38 2 : case AUDIT_DEL_USER: return "DEL_USER";
39 2 : case AUDIT_ADD_GROUP: return "ADD_GROUP";
40 2 : case AUDIT_DEL_GROUP: return "DEL_GROUP";
41 2 : case AUDIT_DAC_CHECK: return "DAC_CHECK";
42 2 : case AUDIT_CHGRP_ID: return "CHGRP_ID";
43 2 : case AUDIT_TEST: return "TEST";
44 2 : case AUDIT_TRUSTED_APP: return "TRUSTED_APP";
45 2 : case AUDIT_USER_SELINUX_ERR: return "USER_SELINUX_ERR";
46 2 : case AUDIT_USER_CMD: return "USER_CMD";
47 2 : case AUDIT_USER_TTY: return "USER_TTY";
48 2 : case AUDIT_CHUSER_ID: return "CHUSER_ID";
49 2 : case AUDIT_GRP_AUTH: return "GRP_AUTH";
50 2 : case AUDIT_SYSTEM_BOOT: return "SYSTEM_BOOT";
51 2 : case AUDIT_SYSTEM_SHUTDOWN: return "SYSTEM_SHUTDOWN";
52 2 : case AUDIT_SYSTEM_RUNLEVEL: return "SYSTEM_RUNLEVEL";
53 2 : case AUDIT_SERVICE_START: return "SERVICE_START";
54 2 : case AUDIT_SERVICE_STOP: return "SERVICE_STOP";
55 2 : case AUDIT_GRP_MGMT: return "GRP_MGMT";
56 2 : case AUDIT_GRP_CHAUTHTOK: return "GRP_CHAUTHTOK";
57 2 : case AUDIT_DAEMON_START: return "DAEMON_START";
58 2 : case AUDIT_DAEMON_END: return "DAEMON_END";
59 2 : case AUDIT_DAEMON_ABORT: return "DAEMON_ABORT";
60 2 : case AUDIT_DAEMON_CONFIG: return "DAEMON_CONFIG";
61 2 : case AUDIT_DAEMON_RECONFIG: return "DAEMON_RECONFIG";
62 2 : case AUDIT_DAEMON_ROTATE: return "DAEMON_ROTATE";
63 2 : case AUDIT_DAEMON_RESUME: return "DAEMON_RESUME";
64 2 : case AUDIT_DAEMON_ACCEPT: return "DAEMON_ACCEPT";
65 2 : case AUDIT_DAEMON_CLOSE: return "DAEMON_CLOSE";
66 2 : case AUDIT_SYSCALL: return "SYSCALL";
67 2 : case AUDIT_PATH: return "PATH";
68 2 : case AUDIT_IPC: return "IPC";
69 2 : case AUDIT_SOCKETCALL: return "SOCKETCALL";
70 2 : case AUDIT_CONFIG_CHANGE: return "CONFIG_CHANGE";
71 2 : case AUDIT_SOCKADDR: return "SOCKADDR";
72 2 : case AUDIT_CWD: return "CWD";
73 2 : case AUDIT_EXECVE: return "EXECVE";
74 2 : case AUDIT_IPC_SET_PERM: return "IPC_SET_PERM";
75 2 : case AUDIT_MQ_OPEN: return "MQ_OPEN";
76 2 : case AUDIT_MQ_SENDRECV: return "MQ_SENDRECV";
77 2 : case AUDIT_MQ_NOTIFY: return "MQ_NOTIFY";
78 2 : case AUDIT_MQ_GETSETATTR: return "MQ_GETSETATTR";
79 2 : case AUDIT_KERNEL_OTHER: return "KERNEL_OTHER";
80 2 : case AUDIT_FD_PAIR: return "FD_PAIR";
81 2 : case AUDIT_OBJ_PID: return "OBJ_PID";
82 2 : case AUDIT_TTY: return "TTY";
83 2 : case AUDIT_EOE: return "EOE";
84 2 : case AUDIT_BPRM_FCAPS: return "BPRM_FCAPS";
85 2 : case AUDIT_CAPSET: return "CAPSET";
86 2 : case AUDIT_MMAP: return "MMAP";
87 2 : case AUDIT_NETFILTER_PKT: return "NETFILTER_PKT";
88 2 : case AUDIT_NETFILTER_CFG: return "NETFILTER_CFG";
89 2 : case AUDIT_SECCOMP: return "SECCOMP";
90 2 : case AUDIT_PROCTITLE: return "PROCTITLE";
91 2 : case AUDIT_FEATURE_CHANGE: return "FEATURE_CHANGE";
92 2 : case AUDIT_AVC: return "AVC";
93 2 : case AUDIT_SELINUX_ERR: return "SELINUX_ERR";
94 2 : case AUDIT_AVC_PATH: return "AVC_PATH";
95 2 : case AUDIT_MAC_POLICY_LOAD: return "MAC_POLICY_LOAD";
96 2 : case AUDIT_MAC_STATUS: return "MAC_STATUS";
97 2 : case AUDIT_MAC_CONFIG_CHANGE: return "MAC_CONFIG_CHANGE";
98 2 : case AUDIT_MAC_UNLBL_ALLOW: return "MAC_UNLBL_ALLOW";
99 2 : case AUDIT_MAC_CIPSOV4_ADD: return "MAC_CIPSOV4_ADD";
100 2 : case AUDIT_MAC_CIPSOV4_DEL: return "MAC_CIPSOV4_DEL";
101 2 : case AUDIT_MAC_MAP_ADD: return "MAC_MAP_ADD";
102 2 : case AUDIT_MAC_MAP_DEL: return "MAC_MAP_DEL";
103 2 : case AUDIT_MAC_IPSEC_ADDSA: return "MAC_IPSEC_ADDSA";
104 2 : case AUDIT_MAC_IPSEC_DELSA: return "MAC_IPSEC_DELSA";
105 2 : case AUDIT_MAC_IPSEC_ADDSPD: return "MAC_IPSEC_ADDSPD";
106 2 : case AUDIT_MAC_IPSEC_DELSPD: return "MAC_IPSEC_DELSPD";
107 2 : case AUDIT_MAC_IPSEC_EVENT: return "MAC_IPSEC_EVENT";
108 2 : case AUDIT_MAC_UNLBL_STCADD: return "MAC_UNLBL_STCADD";
109 2 : case AUDIT_MAC_UNLBL_STCDEL: return "MAC_UNLBL_STCDEL";
110 2 : case AUDIT_AA: return "AA";
111 2 : case AUDIT_APPARMOR_AUDIT: return "APPARMOR_AUDIT";
112 2 : case AUDIT_APPARMOR_ALLOWED: return "APPARMOR_ALLOWED";
113 2 : case AUDIT_APPARMOR_DENIED: return "APPARMOR_DENIED";
114 2 : case AUDIT_APPARMOR_HINT: return "APPARMOR_HINT";
115 2 : case AUDIT_APPARMOR_STATUS: return "APPARMOR_STATUS";
116 2 : case AUDIT_APPARMOR_ERROR: return "APPARMOR_ERROR";
117 2 : case AUDIT_ANOM_PROMISCUOUS: return "ANOM_PROMISCUOUS";
118 2 : case AUDIT_ANOM_ABEND: return "ANOM_ABEND";
119 2 : case AUDIT_ANOM_LINK: return "ANOM_LINK";
120 2 : case AUDIT_INTEGRITY_DATA: return "INTEGRITY_DATA";
121 2 : case AUDIT_INTEGRITY_METADATA: return "INTEGRITY_METADATA";
122 2 : case AUDIT_INTEGRITY_STATUS: return "INTEGRITY_STATUS";
123 2 : case AUDIT_INTEGRITY_HASH: return "INTEGRITY_HASH";
124 2 : case AUDIT_INTEGRITY_PCR: return "INTEGRITY_PCR";
125 2 : case AUDIT_INTEGRITY_RULE: return "INTEGRITY_RULE";
126 2 : case AUDIT_KERNEL: return "KERNEL";
127 0 : case AUDIT_ANOM_LOGIN_FAILURES: return "ANOM_LOGIN_FAILURES";
128 0 : case AUDIT_ANOM_LOGIN_TIME: return "ANOM_LOGIN_TIME";
129 0 : case AUDIT_ANOM_LOGIN_SESSIONS: return "ANOM_LOGIN_SESSIONS";
130 0 : case AUDIT_ANOM_LOGIN_ACCT: return "ANOM_LOGIN_ACCT";
131 0 : case AUDIT_ANOM_LOGIN_LOCATION: return "ANOM_LOGIN_LOCATION";
132 0 : case AUDIT_ANOM_MAX_DAC: return "ANOM_MAX_DAC";
133 0 : case AUDIT_ANOM_MAX_MAC: return "ANOM_MAX_MAC";
134 0 : case AUDIT_ANOM_AMTU_FAIL: return "ANOM_AMTU_FAIL";
135 0 : case AUDIT_ANOM_RBAC_FAIL: return "ANOM_RBAC_FAIL";
136 0 : case AUDIT_ANOM_RBAC_INTEGRITY_FAIL: return "ANOM_RBAC_INTEGRITY_FAIL";
137 0 : case AUDIT_ANOM_CRYPTO_FAIL: return "ANOM_CRYPTO_FAIL";
138 0 : case AUDIT_ANOM_ACCESS_FS: return "ANOM_ACCESS_FS";
139 0 : case AUDIT_ANOM_EXEC: return "ANOM_EXEC";
140 0 : case AUDIT_ANOM_MK_EXEC: return "ANOM_MK_EXEC";
141 0 : case AUDIT_ANOM_ADD_ACCT: return "ANOM_ADD_ACCT";
142 0 : case AUDIT_ANOM_DEL_ACCT: return "ANOM_DEL_ACCT";
143 0 : case AUDIT_ANOM_MOD_ACCT: return "ANOM_MOD_ACCT";
144 0 : case AUDIT_ANOM_ROOT_TRANS: return "ANOM_ROOT_TRANS";
145 0 : case AUDIT_RESP_ANOMALY: return "RESP_ANOMALY";
146 0 : case AUDIT_RESP_ALERT: return "RESP_ALERT";
147 0 : case AUDIT_RESP_KILL_PROC: return "RESP_KILL_PROC";
148 0 : case AUDIT_RESP_TERM_ACCESS: return "RESP_TERM_ACCESS";
149 0 : case AUDIT_RESP_ACCT_REMOTE: return "RESP_ACCT_REMOTE";
150 0 : case AUDIT_RESP_ACCT_LOCK_TIMED: return "RESP_ACCT_LOCK_TIMED";
151 0 : case AUDIT_RESP_ACCT_UNLOCK_TIMED: return "RESP_ACCT_UNLOCK_TIMED";
152 0 : case AUDIT_RESP_ACCT_LOCK: return "RESP_ACCT_LOCK";
153 0 : case AUDIT_RESP_TERM_LOCK: return "RESP_TERM_LOCK";
154 0 : case AUDIT_RESP_SEBOOL: return "RESP_SEBOOL";
155 0 : case AUDIT_RESP_EXEC: return "RESP_EXEC";
156 0 : case AUDIT_RESP_SINGLE: return "RESP_SINGLE";
157 0 : case AUDIT_RESP_HALT: return "RESP_HALT";
158 0 : case AUDIT_USER_ROLE_CHANGE: return "USER_ROLE_CHANGE";
159 0 : case AUDIT_ROLE_ASSIGN: return "ROLE_ASSIGN";
160 0 : case AUDIT_ROLE_REMOVE: return "ROLE_REMOVE";
161 0 : case AUDIT_LABEL_OVERRIDE: return "LABEL_OVERRIDE";
162 0 : case AUDIT_LABEL_LEVEL_CHANGE: return "LABEL_LEVEL_CHANGE";
163 0 : case AUDIT_USER_LABELED_EXPORT: return "USER_LABELED_EXPORT";
164 0 : case AUDIT_USER_UNLABELED_EXPORT: return "USER_UNLABELED_EXPORT";
165 0 : case AUDIT_DEV_ALLOC: return "DEV_ALLOC";
166 0 : case AUDIT_DEV_DEALLOC: return "DEV_DEALLOC";
167 0 : case AUDIT_FS_RELABEL: return "FS_RELABEL";
168 0 : case AUDIT_USER_MAC_POLICY_LOAD: return "USER_MAC_POLICY_LOAD";
169 0 : case AUDIT_ROLE_MODIFY: return "ROLE_MODIFY";
170 0 : case AUDIT_USER_MAC_CONFIG_CHANGE: return "USER_MAC_CONFIG_CHANGE";
171 0 : case AUDIT_CRYPTO_TEST_USER: return "CRYPTO_TEST_USER";
172 0 : case AUDIT_CRYPTO_PARAM_CHANGE_USER: return "CRYPTO_PARAM_CHANGE_USER";
173 0 : case AUDIT_CRYPTO_LOGIN: return "CRYPTO_LOGIN";
174 0 : case AUDIT_CRYPTO_LOGOUT: return "CRYPTO_LOGOUT";
175 0 : case AUDIT_CRYPTO_KEY_USER: return "CRYPTO_KEY_USER";
176 0 : case AUDIT_CRYPTO_FAILURE_USER: return "CRYPTO_FAILURE_USER";
177 0 : case AUDIT_CRYPTO_REPLAY_USER: return "CRYPTO_REPLAY_USER";
178 0 : case AUDIT_CRYPTO_SESSION: return "CRYPTO_SESSION";
179 0 : case AUDIT_CRYPTO_IKE_SA: return "CRYPTO_IKE_SA";
180 0 : case AUDIT_CRYPTO_IPSEC_SA: return "CRYPTO_IPSEC_SA";
181 0 : case AUDIT_VIRT_CONTROL: return "VIRT_CONTROL";
182 0 : case AUDIT_VIRT_RESOURCE: return "VIRT_RESOURCE";
183 0 : case AUDIT_VIRT_MACHINE_ID: return "VIRT_MACHINE_ID";
184 0 : case AUDIT_MESSAGE_TEXT_MAX: return "MESSAGE_TEXT_MAX";
185 3754 : default: return NULL;
186 : }
187 : }
188 :
|
