| blob | 8292b3893bea3ab0285e951b13a5ece367fd8f7c |
1 <?xml version="1.0" standalone="yes"?>
2 <!DOCTYPE specification SYSTEM "audit.dtd">
3 <!--
4 CDDL HEADER START
6 The contents of this file are subject to the terms of the
7 Common Development and Distribution License (the "License").
8 You may not use this file except in compliance with the License.
10 You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
11 or http://www.opensolaris.org/os/licensing.
12 See the License for the specific language governing permissions
13 and limitations under the License.
15 When distributing Covered Code, include this CDDL HEADER in each
16 file and include the License file at usr/src/OPENSOLARIS.LICENSE.
17 If applicable, add the following below this CDDL HEADER, with the
18 fields enclosed by brackets "[]" replaced with your own identifying
19 information: Portions Copyright [yyyy] [name of copyright owner]
21 CDDL HEADER END
23 Copyright (c) 2009, 2010, Oracle and/or its affiliates. All rights reserved.
25 -->
27 <specification>
29 <!-- comments are displayed to stderr if debug is on -->
30 <debug set="off"/>
32 <!-- The order of events is arbitrary EXCEPT generic events must
33 precede their instances -->
34 <!-- The order of entries within an event determine the order
35 data is defined in the external API -->
36 <!-- The order of internal / external is arbitrary -->
38 <!--
39 tags:
40 The following top level tags are defined:
41 <event> <token> <msg_list> <debug>
43 event defines an audit record
44 - id is the record id from audit_uevents.h
45 - reorder="yes" or "no". (default is "no").
46 if "yes" then the order of the tokens to be
47 output does not match the order of the data
48 input. (see order attribute of <entry>)
49 - header defines the header file to contain the external
50 definitions for this event type. The header file
51 name is adt_event_N.h, where N is the value supplied
52 header="0" is for "stable" events, > 0 for new ones.
53 with this attribute. (header="1").
54 - idNo is the number associated with the external
55 name of this event. (For AUE_login, ADT_login is
56 the external name and idNo is the value for
57 ADT_login.)
58 - omit is by default 'no' (i.e., don't omit) and can be
59 'always' or 'JNI'. In the latter case, C interface
60 code is generated but neither Java nor JNI code is.
61 - included text is just a comment
62 Within an event block, the following tags are defined:
63 <entry>, <debug>, <altname>, <title>, <program>, <see>
65 altname defines the internal name of an audit record; if
66 omitted, the internal name is the same as the
67 external name.
69 title, these tags are used by auditrecord(1M) build to create
70 program, audit_record_attr database from adt events.
71 see Following example demonstrates their semantics:
73 auditrecord -p passwd
74 passwd <- <title>
75 program various See passwd(1)
76 ^- <program> ^- <see>
77 event ID 6163 AUE_passwd
78 class lo (0x00001000)
79 header
80 subject
81 [text] username...
82 ^- <comment>
83 return
85 If the length of string in any of the given
86 elements is longer than defined, the string is
87 silently truncated to the defined length in the
88 auditrecord(1M) runtime:
90 element <= max (non-truncated) string length
91 title <= 46
92 program <= 20
93 see <= 39
94 comment <= unlimited
95 token <= 28
97 entry defines the correspondence between the data
98 supplied by the caller and the token to be
99 output.
100 - id is the data name that shows up in the structures
101 of adt_event.h If it is a comma separated list,
102 it is the list of names of data to be associated
103 with one output token. (See <external>, below)
104 Within an entry block, the following tags are defined:
105 <internal>, <external>, <debug>, <comment>
107 internal defines the token to be generated.
108 - token is a name that must also be defined with
109 a <token> tag elsewhere in this file. (order is
110 not important).
111 - order="some number" determines the order of the
112 tokens to be output, starting with 1. The subject
113 token is normally order="1". The use is to insure
114 that the order of fields listed in adt_event.h does
115 not change when we arbitrarily change the order of
116 tokens. If the <event reorder="yes"> is not set,
117 order is ignored.
118 - format is a printf-like string that will be used
119 in to format the data supplied by the user.
121 external defines the data to be supplied for creating the
122 token defined via <internal>
123 - opt is one of four values: "required", "optional",
124 "obsolete", or "none". The first two values
125 indicate that this token's data must or may
126 be supplied by the user; the third value is
127 equivalent to "optional" but shows in the
128 comment that this field is no longer used;
129 the forth value indicates that this token
130 does not require any user-supplied data. If
131 data is required, then a token is always
132 output, while optional data is output only
133 if data is supplied.
134 - type describes the C data type to be associated
135 with the <entry id="dataName">. The following
136 data types are representative:
138 au_asid_t (uint32_t)
139 char
140 char * (blank is optional)
141 char ** (blank is optional)
142 fd_t (int, a file descriptor)
143 uint_t, int, int32_t, uid_t, gid_t
144 uid_t *, gid_t *
145 long, ulong_t
146 pid_t
147 priv_set_t *
148 uint16_t, unit32_t, uint64_t
149 uint32_t *, uint32_t[], uint64_t *
150 msg (not a C type, see below)
152 Below is what Tony said. Above seems to be
153 what is implemented
154 char
155 char * (blank is optional)
156 char ** (blank is optional)
157 int, uid_t, gid_t
158 int *, uid_t *, gid_t *
159 msg (not a C type, see below)
160 time_t
161 uint, uint *
163 The msg type refers to an enumerated type
164 that must be defined via a <msg> description
165 else where in this file. The syntax is
166 special. Example: <external opt="optional"
167 type="msg login_text"/> "login_text" is the
168 id of a <msg_list> descriptor given
169 elsewhere in this file.
171 If the <entry> id is a list, the type must also
172 be a comma-separated list, where the types are
173 in the same order as the id's.
174 If the type is an array, its length must be given
175 explicitly.
177 comment Used by auditrecord(1M) build to generate
178 audit_record_attr. Comment is explanation note
179 printed with token type. Colon (':') may not be
180 used in a comment. See example above for other
181 tags related to auditrecord(1M).
183 token Define allowed token names.
184 - id is the name of token; this name is used
185 as an <internal> id.
186 - a token id name may not end in digits.
187 - usage is an optional value.
188 See also example above for "token" tag relation to
189 the auditrecord(1M) output.
191 msg_list Define a set of text strings.
192 - id is the name to be used for this group of text
193 strings in adt_event.h
194 - header is as defined for <event>
195 - start is a number where produced enum type begins;
196 ensure msg lists do not overlap
197 Within a msg_list block, <msg> and <debug> are defined.
198 The order of <msg> tags in a msg_list is reflected
199 directly in adt_event.h. Also add ADT_LIST_<<id>> to
200 enum adt_msg_list in adt_xlate.h.
202 msg Define one string.
203 - id is the name to be used in the enum describing
204 this set of strings. Convention: use upper case.
205 The content (text between <msg> and </msg>) is the
206 actual string. Extra white space, including line
207 feeds, is ignored. If empty, no output token
208 is generated unless the <external> opt attribute is
209 set to "required", in which case a blank text token
210 is generated.
211 Within a msg block, <debug> is defined, but has not been
212 tested and may have no effect.
214 debug This turns on/off debug messages during the processing
215 of the xml data. It affects the block within which it
216 is defined.
217 - set may have one of two values: "on" or "off". If
218 set is omitted, the debug state for the current block
219 is toggled.
220 The use of the <debug> tag does not affect the output
221 of data to the various files created, but does generate
222 potentially large amounts of output to stderr.
224 -->
225 <!-- template for an event record definition
227 <event id="" header="0" idNo="">
228 <entry id="subject">
229 <internal token="subject"/>
230 <external opt="none"/>
231 </entry>
232 <entry id="">
233 <internal token=""/>
234 <external opt="" type="" />
235 </entry>
236 <entry id="return">
237 <internal token="return"/>
238 <external opt="none"/>
239 </entry>
240 </event>
242 Generic events must precede Instance events; within each
243 group, please group the AUE_* by area and event idNo-s in order,
244 gaps in idNo-s are OK.
245 N.B. Renumbering idNo-s requires recompilation of consumers. See
246 the contracts for whom to notify if/when this happens.
247 -->
249 <!-- generic events -->
251 <!--
252 'omit="always"' means that this record type is not reflected
253 in the generated header and table files.
254 -->
256 <event id="AUE_generic_basic" type="generic" omit="always">
257 <!--
259 This is a template for the event types that have no tokens
260 other than the header and return. There is no allowed_type
261 list because the template is not externally visible due to the
262 omit="always".
264 -->
265 <entry id="subject">
266 <internal token="subject"/>
267 <external opt="none"/>
268 </entry>
269 <entry id="return">
270 <internal token="return"/>
271 <external opt="none"/>
272 </entry>
273 </event>
275 <event id="AUE_generic_login" type="generic" omit="always">
276 <!--
278 This is a template for the various login event types
279 AUE_login, AUE_ftp, etc which match this template. There is
280 no allowed_type list because the template is not externally
281 visible due to the omit="always".
283 -->
284 <entry id="subject">
285 <internal token="subject"/>
286 <external opt="none"/>
287 </entry>
289 <!-- This field is still in use for SMC until it is cleaned up,
290 it must remain, see login_text msg list at the end of the
291 file.
292 -->
293 <entry id="message">
294 <internal token="text"/>
295 <external opt="optional" type="msg login_text"/>
296 <comment>error message</comment>
297 </entry>
298 <entry id="return">
299 <internal token="return"/>
300 <external opt="none"/>
301 </entry>
302 </event>
304 <!-- generic SMC events -->
306 <event id="AUE_generic_SMC_add" type="generic" omit="always">
307 <entry id="subject">
308 <internal token="subject"/>
309 <external opt="none"/>
310 </entry>
311 <entry id="object_name">
312 <internal token="text"/>
313 <external opt="required" type="char *"/>
314 <comment>object name</comment>
315 </entry>
316 <entry id="domain">
317 <internal token="text"/>
318 <external opt="optional" type="char *"/>
319 <comment>domain</comment>
320 </entry>
321 <entry id="name_service">
322 <internal token="text"/>
323 <external opt="required" type="char *"/>
324 <comment>name_service</comment>
325 </entry>
326 <entry id="auth_used">
327 <internal token="uauth"/>
328 <external opt="optional" type="char *"/>
329 <comment>authorization used</comment>
330 </entry>
331 <!--
332 This should really be its own token type, not "text"
333 -->
334 <entry id="initial_values">
335 <internal token="text"/>
336 <external opt="required" type="char *"/>
337 <comment>initial values</comment>
338 </entry>
339 <entry id="return">
340 <internal token="return"/>
341 <external opt="none"/>
342 </entry>
343 </event>
345 <event id="AUE_generic_SMC_delete" type="generic" omit="always">
346 <entry id="subject">
347 <internal token="subject"/>
348 <external opt="none"/>
349 </entry>
350 <entry id="object_name">
351 <internal token="text"/>
352 <external opt="required" type="char *"/>
353 <comment>object name</comment>
354 </entry>
355 <entry id="domain">
356 <internal token="text"/>
357 <external opt="optional" type="char *"/>
358 <comment>domain</comment>
359 </entry>
360 <entry id="name_service">
361 <internal token="text"/>
362 <external opt="required" type="char *"/>
363 <comment>name_service</comment>
364 </entry>
365 <entry id="auth_used">
366 <internal token="uauth"/>
367 <external opt="optional" type="char *"/>
368 <comment>authorization used</comment>
369 </entry>
370 <entry id="delete_values">
371 <internal token="text"/>
372 <external opt="required" type="char *"/>
373 <comment>deleted values</comment>
374 </entry>
375 <entry id="return">
376 <internal token="return"/>
377 <external opt="none"/>
378 </entry>
379 </event>
381 <event id="AUE_generic_SMC_modify" type="generic" omit="always">
382 <entry id="subject">
383 <internal token="subject"/>
384 <external opt="none"/>
385 </entry>
386 <entry id="object_name">
387 <internal token="text"/>
388 <external opt="required" type="char *"/>
389 <comment>object name</comment>
390 </entry>
391 <entry id="domain">
392 <internal token="text"/>
393 <external opt="optional" type="char *"/>
394 <comment>domain</comment>
395 </entry>
396 <entry id="name_service">
397 <internal token="text"/>
398 <external opt="required" type="char *"/>
399 <comment>name_service</comment>
400 </entry>
401 <entry id="auth_used">
402 <internal token="uauth"/>
403 <external opt="optional" type="char *"/>
404 <comment>authorization used</comment>
405 </entry>
406 <entry id="changed_values">
407 <internal token="text"/>
408 <external opt="required" type="char *"/>
409 <comment>changed values</comment>
410 </entry>
411 <entry id="return">
412 <internal token="return"/>
413 <external opt="none"/>
414 </entry>
415 </event>
417 <!-- instances -->
419 <!--
420 Java needed for SMC events. Since the SMC events grow less
421 often than the C related events. They come first. It
422 would be nice to reorder the idNo-s, but that's an ABI
423 change and should rev libbsm version no. If reordered
424 start with 1 and eliminate the comment at the end about
425 the highest idNo.
426 -->
427 <event id="AUE_admin_authenticate" instance_of="AUE_generic_login"
428 header="0" idNo="3">
429 <title>Admin Server Authentication</title>
430 <program>admin (various)</program>
431 <see>SMC, WBEM, or AdminSuite</see>
432 </event>
434 <event id="AUE_filesystem_add" instance_of="AUE_generic_SMC_add"
435 header="0" idNo="4">
436 <title>SMC: filesystem add</title>
437 <program>SMC server</program>
438 </event>
439 <event id="AUE_filesystem_delete" instance_of="AUE_generic_SMC_delete"
440 header="0" idNo="5">
441 <title>SMC: filesystem delete</title>
442 <program>SMC server</program>
443 </event>
444 <event id="AUE_filesystem_modify" instance_of="AUE_generic_SMC_modify"
445 header="0" idNo="6">
446 <title>SMC: filesystem modify</title>
447 <program>SMC server</program>
448 </event>
450 <event id="AUE_network_add" instance_of="AUE_generic_SMC_add"
451 header="0" idNo="7">
452 <title>SMC: network add</title>
453 <program>SMC server</program>
454 </event>
455 <event id="AUE_network_delete" instance_of="AUE_generic_SMC_delete"
456 header="0" idNo="8">
457 <title>SMC: network delete</title>
458 <program>SMC server</program>
459 </event>
460 <event id="AUE_network_modify" instance_of="AUE_generic_SMC_modify"
461 header="0" idNo="9">
462 <title>SMC: network modify</title>
463 <program>SMC server</program>
464 </event>
466 <event id="AUE_printer_add" instance_of="AUE_generic_SMC_add"
467 header="0" idNo="10">
468 <title>SMC: printer add</title>
469 <program>SMC server</program>
470 </event>
471 <event id="AUE_printer_delete" instance_of="AUE_generic_SMC_delete"
472 header="0" idNo="11">
473 <title>SMC: printer delete</title>
474 <program>SMC server</program>
475 </event>
476 <event id="AUE_printer_modify" instance_of="AUE_generic_SMC_modify"
477 header="0" idNo="12">
478 <title>SMC: printer modify</title>
479 <program>SMC server</program>
480 </event>
482 <!--
483 This is SMC; it's also used in su and should probably be used in
484 desktop role login. If we fix the SMC to not record NO_MSG here,
485 we can fix to record failed user. See su.c and AUE_su.
486 -->
487 <event id="AUE_role_login" instance_of="AUE_generic_login"
488 header="0" idNo="13">
489 <title>RBAC: role login</title>
490 <program>SMC server</program>
491 <program>/usr/bin/su</program>
492 </event>
494 <event id="AUE_scheduledjob_add" instance_of="AUE_generic_SMC_add"
495 header="0" idNo="14">
496 <title>SMC: scheduled job add</title>
497 <program>SMC server</program>
498 </event>
499 <event id="AUE_scheduledjob_delete" instance_of="AUE_generic_SMC_delete"
500 header="0" idNo="15">
501 <title>SMC: scheduled job delete</title>
502 <program>SMC server</program>
503 </event>
504 <event id="AUE_scheduledjob_modify" instance_of="AUE_generic_SMC_modify"
505 header="0" idNo="16">
506 <title>SMC: scheduled job modify</title>
507 <program>SMC server</program>
508 </event>
510 <event id="AUE_serialport_add" instance_of="AUE_generic_SMC_add"
511 header="0" idNo="17">
512 <title>SMC: serial port add</title>
513 <program>SMC server</program>
514 </event>
515 <event id="AUE_serialport_delete" instance_of="AUE_generic_SMC_delete"
516 header="0" idNo="18">
517 <title>SMC: serial port delete</title>
518 <program>SMC server</program>
519 </event>
520 <event id="AUE_serialport_modify" instance_of="AUE_generic_SMC_modify"
521 header="0" idNo="19">
522 <title>SMC: serial port modify</title>
523 <program>SMC server</program>
524 </event>
526 <!-- This is SMC; should this also be used elsewhere? -->
527 <event id="AUE_uauth" header="0" idNo="20">
528 <title>SMC: Use of Authorization</title>
529 <program>SMC server</program>
530 <entry id="subject">
531 <internal token="subject"/>
532 <external opt="none"/>
533 </entry>
534 <entry id="auth_used">
535 <internal token="uauth"/>
536 <external opt="required" type="char *"/>
537 <comment>authorization used</comment>
538 </entry>
539 <entry id="objectname">
540 <internal token="text"/>
541 <external opt="required" type="char *"/>
542 <comment>object name</comment>
543 </entry>
544 <entry id="return">
545 <internal token="return"/>
546 <external opt="none"/>
547 </entry>
548 </event>
550 <event id="AUE_usermgr_add" instance_of="AUE_generic_SMC_add"
551 header="0" idNo="21">
552 <title>SMC: User Manager add</title>
553 <program>SMC server</program>
554 </event>
555 <event id="AUE_usermgr_delete" instance_of="AUE_generic_SMC_delete"
556 header="0" idNo="22">
557 <title>SMC: User Manager delete</title>
558 <program>SMC server</program>
559 </event>
560 <event id="AUE_usermgr_modify" instance_of="AUE_generic_SMC_modify"
561 header="0" idNo="23">
562 <title>SMC: User Manager modify</title>
563 <program>SMC server</program>
564 </event>
565 <!-- end of Java needed for SMC events -->
566 <!--
567 while not used by SMC logout is used by Lockhart
568 -->
569 <event id="AUE_logout" header="0" idNo="1">
570 <title>login: logout</title>
571 <program>various</program>
572 <see>login(1)</see>
573 <entry id="subject">
574 <internal token="subject"/>
575 <external opt="none"/>
576 </entry>
577 <!--
578 not used by C code, used by Lockhart,
579 get them to change and remove
580 event.user_name("logout " + session.getUserName());
581 from /ws/lockhart-nv-gate/src/bundled/app/webmgt/lib/services/
582 com/sun/management/services/audit/SolarisAuditEvent_Logout.java
583 -->
584 <entry id="user_name">
585 <internal token="text" format="logout %s"/>
586 <external opt="optional" type="char *"/>
587 <comment>"logout" username</comment>
588 </entry>
589 <entry id="return">
590 <internal token="return"/>
591 <external opt="none"/>
592 </entry>
593 </event>
596 <!-- C Only events -->
597 <event id="AUE_init_solaris" header="0" idNo="32" omit="JNI">
598 <title>init</title>
599 <program>/sbin/init</program>
600 <program>/usr/sbin/init</program>
601 <program>/usr/sbin/shutdown</program>
602 <entry id="subject">
603 <internal token="subject"/>
604 <external opt="none"/>
605 </entry>
606 <entry id="info">
607 <internal token="text"/>
608 <external opt="optional" type="char *"/>
609 <comment>init level or zone name</comment>
610 </entry>
611 <entry id="return">
612 <internal token="return"/>
613 <external opt="none"/>
614 </entry>
615 </event>
617 <event id="AUE_login" instance_of="AUE_generic_login" header="0"
618 idNo="25" omit="JNI">
619 <title>terminal login</title>
620 <program>/usr/sbin/login</program>
621 <program>/usr/dt/bin/dtlogin</program>
622 <see>login(1)</see>
623 <see>dtlogin</see>
624 </event>
625 <event id="AUE_rlogin" instance_of="AUE_generic_login" header="0"
626 idNo="28" omit="JNI">
627 <title>rlogin</title>
628 <program>/usr/sbin/login</program>
629 <see>login(1) - rlogin</see>
630 </event>
631 <event id="AUE_telnet" instance_of="AUE_generic_login" header="0"
632 idNo="29" omit="JNI">
633 <title>telnet login</title>
634 <program>/usr/sbin/login</program>
635 <see>login(1) - telnet</see>
636 </event>
637 <event id="AUE_ssh" instance_of="AUE_generic_login" header="0"
638 idNo="2" omit="JNI">
639 <program>/usr/lib/ssh/sshd</program>
640 </event>
642 <event id="AUE_zlogin" header="0" idNo="38" omit="JNI">
643 <title>zone login</title>
644 <program>/usr/sbin/login</program>
645 <see>zlogin(1)</see>
646 <entry id="subject">
647 <internal token="subject"/>
648 <external opt="none"/>
649 </entry>
650 <entry id="message">
651 <internal token="text"/>
652 <external opt="optional" type="char *"/>
653 <comment>error message</comment>
654 </entry>
655 <entry id="return">
656 <internal token="return"/>
657 <external opt="none"/>
658 </entry>
659 </event>
661 <event id="AUE_su" header="0" idNo="30" omit="JNI">
662 <title>su</title>
663 <program>/usr/bin/su</program>
664 <see>su(1M)</see>
665 <entry id="subject">
666 <internal token="subject"/>
667 <external opt="none"/>
668 </entry>
669 <!--
670 should be changed to "fail_user" and su.c updated
671 However, the jni stuff is broken, so for now it's "message"
672 -->
673 <entry id="message">
674 <internal token="text"/>
675 <external opt="optional" type="char *"/>
676 <comment>"user name" of failed new user/role</comment>
677 </entry>
678 <entry id="return">
679 <internal token="return"/>
680 <external opt="none"/>
681 </entry>
682 </event>
684 <event id="AUE_passwd" header="0" idNo="27" omit="JNI">
685 <title>passwd</title>
686 <program>various</program>
687 <see>passwd(1)</see>
688 <entry id="subject">
689 <internal token="subject"/>
690 <external opt="none"/>
691 </entry>
692 <entry id="uid,username">
693 <internal token="user"/>
694 <external opt="optional" type="uid_t,char *"/>
695 <comment>user if different than caller</comment>
696 </entry>
697 <entry id="return">
698 <internal token="return"/>
699 <external opt="none"/>
700 </entry>
701 </event>
703 <event id="AUE_screenlock" instance_of="AUE_generic_basic" header="0"
704 idNo="26" omit="JNI">
705 <program>desktop screen lock</program>
706 </event>
707 <event id="AUE_screenunlock" instance_of="AUE_generic_basic" header="0"
708 idNo="31" omit="JNI">
709 <program>desktop screen unlock</program>
710 </event>
712 <!--
713 AUE_prof_cmd is not supportable for Java due to the structure of
714 the priv token. When and if a Java program needs to generate
715 a priv token, we'll need to look at the data format in the
716 Java code and provide an appropriate java and jni implementation.
717 -->
719 <event id="AUE_prof_cmd" header="0" idNo="24" omit="JNI">
720 <title>pfexec</title>
721 <program>/usr/bin/pfexec</program>
722 <see>pfexec(1)</see>
723 <entry id="subject">
724 <internal token="subject"/>
725 <external opt="none"/>
726 </entry>
727 <entry id="cwdpath">
728 <internal token="path"/>
729 <external opt="required" type="char*"/>
730 <comment>working directory</comment>
731 </entry>
732 <entry id="cmdpath">
733 <internal token="path"/>
734 <external opt="required" type="char*"/>
735 <comment>command pathname</comment>
736 </entry>
737 <entry id="argc,argv,envp">
738 <internal token="command"/>
739 <external opt="required" type="int,char**,char**"/>
740 </entry>
741 <entry id="proc_auid,proc_euid,proc_egid,proc_ruid,proc_rgid,proc_pid,proc_sid,proc_termid">
742 <internal token="process"/>
743 <external opt="required"
744 type="uid_t,uid_t,gid_t,uid_t,gid_t,pid_t,au_asid_t,termid*"/>
745 </entry>
746 <entry id="limit_set">
747 <internal token="priv_limit"/>
748 <external opt="optional" type="priv_set_t*"/>
749 </entry>
750 <entry id="inherit_set">
751 <internal token="priv_inherit"/>
752 <external opt="optional" type="priv_set_t*"/>
753 </entry>
754 <entry id="return">
755 <internal token="return"/>
756 <external opt="none"/>
757 </entry>
758 </event>
760 <event id="AUE_inetd_connect" header="0" idNo="34" omit="JNI">
761 <title>inetd</title>
762 <program>/usr/sbin/inetd</program>
763 <entry id="subject">
764 <internal token="subject"/>
765 <external opt="none"/>
766 </entry>
767 <entry id="service_name">
768 <internal token="text"/>
769 <external opt="optional" type="char *"/>
770 <comment>service name</comment>
771 </entry>
772 <entry id="ip_type,ip_remote_port,ip_local_port,ip_adr">
773 <internal token="tid"/>
774 <external opt="required"
775 type="uint32_t,uint16_t,uint16_t,uint32_t[4]"/>
776 <comment>client address</comment>
777 </entry>
778 <entry id="cmd">
779 <internal token="command_alt"/>
780 <external opt="required" type="char *"/>
781 <comment>inetd command</comment>
782 </entry>
783 <entry id="privileges">
784 <internal token="priv_effective"/>
785 <external opt="required" type="priv_set_t *"/>
786 </entry>
787 <entry id="return">
788 <internal token="return"/>
789 <external opt="none"/>
790 </entry>
791 </event>
793 <event id="AUE_inetd_ratelimit" header="0" idNo="35" omit="JNI">
794 <title>inetd</title>
795 <program>/usr/sbin/inetd</program>
796 <entry id="subject">
797 <internal token="subject"/>
798 <external opt="none"/>
799 </entry>
800 <entry id="service_name">
801 <internal token="text"/>
802 <external opt="optional" type="char *"/>
803 <comment>service name</comment>
804 </entry>
805 <entry id="limit">
806 <internal token="text"/>
807 <external opt="required" type="char *"/>
808 <comment>limit value</comment>
809 </entry>
810 <entry id="return">
811 <internal token="return"/>
812 <external opt="none"/>
813 </entry>
814 </event>
816 <event id="AUE_inetd_copylimit" header="0" idNo="36" omit="JNI">
817 <title>inetd</title>
818 <program>/usr/sbin/inetd</program>
819 <entry id="subject">
820 <internal token="subject"/>
821 <external opt="none"/>
822 </entry>
823 <entry id="service_name">
824 <internal token="text"/>
825 <external opt="optional" type="char *"/>
826 <comment>service name</comment>
827 </entry>
828 <entry id="limit">
829 <internal token="text"/>
830 <external opt="required" type="char *"/>
831 <comment>limit value</comment>
832 </entry>
833 <entry id="return">
834 <internal token="return"/>
835 <external opt="none"/>
836 </entry>
837 </event>
839 <event id="AUE_inetd_failrate" header="0" idNo="37" omit="JNI">
840 <title>inetd</title>
841 <program>/usr/sbin/inetd</program>
842 <entry id="subject">
843 <internal token="subject"/>
844 <external opt="none"/>
845 </entry>
846 <entry id="service_name">
847 <internal token="text"/>
848 <external opt="optional" type="char *"/>
849 <comment>service name</comment>
850 </entry>
851 <entry id="values">
852 <internal token="text"/>
853 <external opt="required" type="char *"/>
854 <comment>limit value, interval</comment>
855 </entry>
856 <entry id="return">
857 <internal token="return"/>
858 <external opt="none"/>
859 </entry>
860 </event>
862 <event id="AUE_zone_state" header="0" idNo="33" omit="JNI">
863 <entry id="subject">
864 <internal token="subject"/>
865 <external opt="none"/>
866 </entry>
867 <entry id="new_state">
868 <internal token="text"/>
869 <external opt="required" type="char *"/>
870 <comment>New zone state</comment>
871 </entry>
872 <entry id="zonename">
873 <internal token="zonename"/>
874 <external opt="required" type="char *"/>
875 <comment>zone name</comment>
876 </entry>
877 <entry id="return">
878 <internal token="return"/>
879 <external opt="none"/>
880 </entry>
881 </event>
883 <event id="AUE_su_logout" instance_of="AUE_generic_basic"
884 header="0" idNo="39" omit="JNI">
885 <title>su</title>
886 <program>/usr/bin/su</program>
887 <see>su(1M)</see>
888 </event>
890 <event id="AUE_role_logout" instance_of="AUE_generic_basic"
891 header="0" idNo="40" omit="JNI">
892 <title>su</title>
893 <program>/usr/bin/su</program>
894 <see>su(1M)</see>
895 </event>
897 <event id="AUE_newgrp_login" header="0" idNo="41" omit="JNI">
898 <program>newgrp</program>
899 <entry id="subject">
900 <internal token="subject"/>
901 <external opt="none"/>
902 </entry>
903 <entry id="groupname">
904 <internal token="text"/>
905 <external opt="required" type="char *"/>
906 <comment>group name</comment>
907 </entry>
908 <entry id="return">
909 <internal token="return"/>
910 <external opt="none"/>
911 </entry>
912 </event>
914 <event id="AUE_generic_mountable" type="generic" omit="always">
915 <!--
917 User device mounting related functions
919 -->
920 <entry id="subject">
921 <internal token="subject"/>
922 <external opt="none"/>
923 </entry>
924 <entry id="auth_used">
925 <internal token="uauth"/>
926 <external opt="required" type="char *"/>
927 <comment>authorization used</comment>
928 </entry>
929 <entry id="mount_point">
930 <internal token="path"/>
931 <external opt="required" type="char *"/>
932 <comment>mount point</comment>
933 </entry>
934 <entry id="device">
935 <internal token="path"/>
936 <external opt="required" type="char *"/>
937 <comment>device</comment>
938 </entry>
939 <entry id="options">
940 <internal token="text"/>
941 <external opt="optional" type="char *"/>
942 <comment>options</comment>
943 </entry>
944 <entry id="return">
945 <internal token="return"/>
946 <external opt="none"/>
947 </entry>
948 </event>
950 <event id="AUE_attach" instance_of="AUE_generic_mountable"
951 header="0" idNo="42" omit="JNI">
952 <program>hald</program>
953 </event>
954 <event id="AUE_detach" instance_of="AUE_generic_mountable"
955 header="0" idNo="43" omit="JNI">
956 <program>hald</program>
957 </event>
958 <event id="AUE_remove" header="0" idNo="44" omit="JNI">
959 <program>hald</program>
960 <entry id="subject">
961 <internal token="subject"/>
962 <external opt="none"/>
963 </entry>
964 <entry id="auth_used">
965 <internal token="uauth"/>
966 <external opt="required" type="char *"/>
967 <comment>authorization used</comment>
968 </entry>
969 <entry id="mount_point">
970 <internal token="path"/>
971 <external opt="optional" type="char *"/>
972 <comment>mount point</comment>
973 </entry>
974 <entry id="device">
975 <internal token="path"/>
976 <external opt="required" type="char *"/>
977 <comment>device</comment>
978 </entry>
979 <entry id="return">
980 <internal token="return"/>
981 <external opt="none"/>
982 </entry>
983 </event>
985 <event id="AUE_pool_import" header="0" idNo="45" omit="JNI">
986 <program>hald</program>
987 <entry id="subject">
988 <internal token="subject"/>
989 <external opt="none"/>
990 </entry>
991 <entry id="auth_used">
992 <internal token="uauth"/>
993 <external opt="required" type="char *"/>
994 <comment>authorization used</comment>
995 </entry>
996 <entry id="pool">
997 <internal token="text"/>
998 <external opt="required" type="char *"/>
999 <comment>pool</comment>
1000 </entry>
1001 <entry id="device">
1002 <internal token="path"/>
1003 <external opt="required" type="char *"/>
1004 <comment>device</comment>
1005 </entry>
1006 <entry id="return">
1007 <internal token="return"/>
1008 <external opt="none"/>
1009 </entry>
1010 </event>
1011 <event id="AUE_pool_export" header="0" idNo="46" omit="JNI">
1012 <program>hald</program>
1013 <entry id="subject">
1014 <internal token="subject"/>
1015 <external opt="none"/>
1016 </entry>
1017 <entry id="auth_used">
1018 <internal token="uauth"/>
1019 <external opt="required" type="char *"/>
1020 <comment>authorization used</comment>
1021 </entry>
1022 <entry id="pool">
1023 <internal token="text"/>
1024 <external opt="required" type="char *"/>
1025 <comment>pool</comment>
1026 </entry>
1027 <entry id="device">
1028 <internal token="path"/>
1029 <external opt="required" type="char *"/>
1030 <comment>device</comment>
1031 </entry>
1032 <entry id="return">
1033 <internal token="return"/>
1034 <external opt="none"/>
1035 </entry>
1036 </event>
1038 <!-- dladm security objected events -->
1039 <event id="AUE_dladm_generic" type="generic" omit="always">
1040 <entry id="subject">
1041 <internal token="subject"/>
1042 <external opt="none"/>
1043 </entry>
1044 <entry id="auth_used">
1045 <internal token="uauth"/>
1046 <external opt="required" type="char *"/>
1047 <comment>authorization used</comment>
1048 </entry>
1049 <entry id="obj_class">
1050 <internal token="text"/>
1051 <external opt="required" type="char *"/>
1052 <comment>object class name</comment>
1053 </entry>
1054 <entry id="obj_name">
1055 <internal token="text"/>
1056 <external opt="required" type="char *"/>
1057 <comment>object name</comment>
1058 </entry>
1059 <entry id="return">
1060 <internal token="return"/>
1061 <external opt="none"/>
1062 </entry>
1063 </event>
1065 <event id="AUE_dladm_create_secobj" instance_of="AUE_dladm_generic"
1066 header="0" idNo="47" omit="JNI">
1067 <title>create wifi security object</title>
1068 <program>/usr/sbin/dladm</program>
1069 <see>dladm(1M)</see>
1070 </event>
1071 <event id="AUE_dladm_delete_secobj" instance_of="AUE_dladm_generic"
1072 header="0" idNo="48" omit="JNI">
1073 <title>delete wifi security object</title>
1074 <program>/usr/sbin/dladm</program>
1075 <see>dladm(1M)</see>
1076 </event>
1078 <!-- uadmin(1m) events -->
1079 <event id="AUE_uadmin_generic" type="generic" omit="always">
1080 <entry id="subject">
1081 <internal token="subject"/>
1082 <external opt="none"/>
1083 </entry>
1084 <entry id="fcn">
1085 <internal token="text"/>
1086 <external opt="required" type="msg uadmin_fcn"/>
1087 <comment>next action</comment>
1088 </entry>
1089 <entry id="mdep">
1090 <internal token="text"/>
1091 <external opt="optional" type="char *"/>
1092 <comment>machine dependent argument</comment>
1093 </entry>
1094 <entry id="return">
1095 <internal token="return"/>
1096 <external opt="none"/>
1097 </entry>
1098 </event>
1099 <event id="AUE_uadmin_generic_fcn" type="generic" omit="always">
1100 <entry id="subject">
1101 <internal token="subject"/>
1102 <external opt="none"/>
1103 </entry>
1104 <entry id="fcn">
1105 <internal token="text"/>
1106 <external opt="required" type="msg uadmin_fcn"/>
1107 <comment>next action</comment>
1108 </entry>
1109 <entry id="return">
1110 <internal token="return"/>
1111 <external opt="none"/>
1112 </entry>
1113 </event>
1114 <event id="AUE_uadmin_shutdown" instance_of="AUE_uadmin_generic"
1115 header="0" idNo="51" omit="JNI">
1116 <title>uadmin shutdown</title>
1117 <program>/sbin/uadmin</program>
1118 <program>/usr/sbin/uadmin</program>
1119 <see>uadmin(1M)</see>
1120 </event>
1121 <event id="AUE_uadmin_reboot" instance_of="AUE_uadmin_generic"
1122 header="0" idNo="52" omit="JNI">
1123 <title>uadmin reboot</title>
1124 <program>/sbin/uadmin</program>
1125 <program>/usr/sbin/uadmin</program>
1126 <see>uadmin(1M)</see>
1127 </event>
1128 <event id="AUE_uadmin_dump" instance_of="AUE_uadmin_generic"
1129 header="0" idNo="53" omit="JNI">
1130 <title>uadmin dump</title>
1131 <program>/sbin/uadmin</program>
1132 <program>/usr/sbin/uadmin</program>
1133 <see>uadmin(1M)</see>
1134 </event>
1135 <event id="AUE_uadmin_freeze" instance_of="AUE_uadmin_generic"
1136 header="0" idNo="54" omit="JNI">
1137 <title>uadmin freeze</title>
1138 <program>/sbin/uadmin</program>
1139 <program>/usr/sbin/uadmin</program>
1140 <see>uadmin(1M)</see>
1141 </event>
1142 <event id="AUE_uadmin_remount" header="0" idNo="55" omit="JNI">
1143 <title>uadmin remount</title>
1144 <program>/sbin/uadmin</program>
1145 <program>/usr/sbin/uadmin</program>
1146 <see>uadmin(1M)</see>
1147 <entry id="subject">
1148 <internal token="subject"/>
1149 <external opt="none"/>
1150 </entry>
1151 <entry id="return">
1152 <internal token="return"/>
1153 <external opt="none"/>
1154 </entry>
1155 </event>
1156 <!-- uadmin ftrace and swapctl are not documented in uadmin(2) -->
1157 <event id="AUE_uadmin_ftrace" instance_of="AUE_uadmin_generic"
1158 header="0" idNo="56" omit="JNI">
1159 <title>uadmin ftrace</title>
1160 <program>/sbin/uadmin</program>
1161 <program>/usr/sbin/uadmin</program>
1162 <see>uadmin(1M)</see>
1163 </event>
1164 <event id="AUE_uadmin_swapctl" instance_of="AUE_uadmin_generic_fcn"
1165 header="0" idNo="57" omit="JNI">
1166 <title>uadmin swapctl</title>
1167 <program>/sbin/uadmin</program>
1168 <program>/usr/sbin/uadmin</program>
1169 <see>uadmin(1M)</see>
1170 </event>
1171 <event id="AUE_uadmin_thaw" header="0" idNo="96" omit="JNI">
1172 <title>thaw after freeze</title>
1173 <program>/sbin/uadmin</program>
1174 <program>/usr/sbin/uadmin</program>
1175 <see>uadmin(1M)</see>
1176 <entry id="subject">
1177 <internal token="subject"/>
1178 <external opt="none"/>
1179 </entry>
1180 <entry id="fcn">
1181 <internal token="text"/>
1182 <external opt="required" type="msg uadmin_fcn"/>
1183 <comment>freeze action type</comment>
1184 </entry>
1185 <entry id="return">
1186 <internal token="return"/>
1187 <external opt="none"/>
1188 </entry>
1189 </event>
1190 <!-- uadmin config is not documented in uadmin(2) -->
1191 <event id="AUE_uadmin_config" instance_of="AUE_uadmin_generic"
1192 header="0" idNo="119" omit="JNI">
1193 <title>uadmin config</title>
1194 <program>/sbin/uadmin</program>
1195 <program>/usr/sbin/uadmin</program>
1196 <see>uadmin(1M)</see>
1197 </event>
1199 <!-- smbd service event; smbd session setup -->
1200 <event id="AUE_smbd_session" header="0" idNo="58" omit="JNI">
1201 <title>smbd</title>
1202 <program>/usr/lib/smbsrv/smbd</program>
1203 <entry id="subject">
1204 <internal token="subject"/>
1205 <external opt="none"/>
1206 </entry>
1207 <entry id="domain">
1208 <internal token="text"/>
1209 <external opt="required" type="char*"/>
1210 <comment>domain</comment>
1211 </entry>
1212 <entry id="username">
1213 <internal token="text"/>
1214 <external opt="required" type="char*"/>
1215 <comment>username</comment>
1216 </entry>
1217 <entry id="sid">
1218 <internal token="text"/>
1219 <external opt="optional" type="char*"/>
1220 <comment>sid</comment>
1221 </entry>
1222 <entry id="return">
1223 <internal token="return"/>
1224 <external opt="none"/>
1225 </entry>
1226 </event>
1228 <!-- smbd service event; smbd session logoff -->
1229 <event id="AUE_smbd_logoff" header="0" idNo="59" omit="JNI">
1230 <title>smbd</title>
1231 <program>/usr/lib/smbsrv/smbd</program>
1232 <entry id="subject">
1233 <internal token="subject"/>
1234 <external opt="none"/>
1235 </entry>
1236 <entry id="domain">
1237 <internal token="text"/>
1238 <external opt="required" type="char*"/>
1239 <comment>domain</comment>
1240 </entry>
1241 <entry id="username">
1242 <internal token="text"/>
1243 <external opt="required" type="char*"/>
1244 <comment>username</comment>
1245 </entry>
1246 <entry id="return">
1247 <internal token="return"/>
1248 <external opt="none"/>
1249 </entry>
1250 </event>
1252 <!-- vscan service event; infected file detected -->
1253 <event id="AUE_vscan_quarantine" header="0" idNo="60" omit="JNI">
1254 <title>VSCAN: quarantine infected file</title>
1255 <program>/usr/lib/vscan/vscand</program>
1256 <see>vscand(1M), ICAP RFC 3507 (Extensions)</see>
1257 <entry id="subject">
1258 <internal token="subject"/>
1259 <external opt="none"/>
1260 </entry>
1261 <entry id="file">
1262 <internal token="path"/>
1263 <external opt="required" type="char*"/>
1264 <comment>infected file</comment>
1265 </entry>
1266 <entry id="violations,nviolations">
1267 <internal token="text"/>
1268 <external opt="optional" type="char**,int"/>
1269 <comment>ID - threat description</comment>
1270 </entry>
1271 <entry id="return">
1272 <internal token="return"/>
1273 <external opt="none"/>
1274 </entry>
1275 </event>
1277 <!-- ndmp service event; ndmp client connect -->
1278 <event id="AUE_ndmp_connect" instance_of="AUE_generic_basic" header="0"
1279 idNo="61" omit="JNI">
1280 <title>NDMP Connect</title>
1281 <program>/usr/lib/ndmp/ndmpd</program>
1282 <see>ndmpd(1M)</see>
1283 </event>
1285 <!-- ndmp service event; ndmp client disconnect -->
1286 <event id="AUE_ndmp_disconnect" instance_of="AUE_generic_basic" header="0"
1287 idNo="62" omit="JNI">
1288 <title>NDMP Disconnect</title>
1289 <program>/usr/lib/ndmp/ndmpd</program>
1290 <see>ndmpd(1M)</see>
1291 </event>
1293 <!-- ndmp service event; ndmp backup -->
1294 <event id="AUE_ndmp_backup" header="0" idNo="63" omit="JNI">
1295 <title>NDMP Backup</title>
1296 <program>/usr/lib/ndmp/ndmpd</program>
1297 <see>ndmpd(1M)</see>
1298 <entry id="subject">
1299 <internal token="subject"/>
1300 <external opt="none"/>
1301 </entry>
1302 <entry id="source">
1303 <internal token="path"/>
1304 <external opt="required" type="char *"/>
1305 <comment>path to be backed up</comment>
1306 </entry>
1307 <entry id="local_dest">
1308 <internal token="path"/>
1309 <external opt="optional" type="char *"/>
1310 <comment>local path of backup destination</comment>
1311 </entry>
1312 <entry id="remote_dest">
1313 <internal token="in_peer"/>
1314 <external opt="optional" type="fd_t"/>
1315 <comment>remote ip address and port of backup destination</comment>
1316 </entry>
1317 <entry id="return">
1318 <internal token="return"/>
1319 <external opt="none"/>
1320 </entry>
1321 </event>
1323 <!-- ndmp service event; ndmp restore -->
1324 <event id="AUE_ndmp_restore" header="0" idNo="64" omit="JNI">
1325 <title>NDMP Restore</title>
1326 <program>/usr/lib/ndmp/ndmpd</program>
1327 <see>ndmpd(1M)</see>
1328 <entry id="subject">
1329 <internal token="subject"/>
1330 <external opt="none"/>
1331 </entry>
1332 <entry id="destination">
1333 <internal token="path"/>
1334 <external opt="required" type="char *"/>
1335 <comment>path to restore to</comment>
1336 </entry>
1337 <entry id="local_source">
1338 <internal token="path"/>
1339 <external opt="optional" type="char *"/>
1340 <comment>local path to restore from</comment>
1341 </entry>
1342 <entry id="remote_source">
1343 <internal token="in_peer"/>
1344 <external opt="optional" type="fd_t"/>
1345 <comment>remote ip address and port to restore from</comment>
1346 </entry>
1347 <entry id="return">
1348 <internal token="return"/>
1349 <external opt="none"/>
1350 </entry>
1351 </event>
1353 <!-- SMF related events -->
1354 <event id="AUE_smf_generic" type="generic" omit="always">
1355 <!--
1356 This is a template for the event types that have no tokens
1357 other than the header and return. There is no allowed_type
1358 list because the template is not externally visible due to the
1359 omit="always".
1360 -->
1361 <entry id="subject">
1362 <internal token="subject"/>
1363 <external opt="none"/>
1364 </entry>
1365 <entry id="auth_used">
1366 <internal token="uauth"/>
1367 <external opt="required" type="char *"/>
1368 <comment>authorization used</comment>
1369 </entry>
1370 <entry id="fmri">
1371 <internal token="fmri"/>
1372 <external opt="required" type="char *"/>
1373 <comment>name</comment>
1374 </entry>
1375 <entry id="return">
1376 <internal token="return"/>
1377 <external opt="none"/>
1378 </entry>
1379 </event>
1381 <event id="AUE_smf_generic_pg" type="generic" omit="always">
1382 <!--
1383 This is a template for the event types related to property groups.
1384 There is no allowed_type list because the template is not externally
1385 visible due to the omit="always".
1386 -->
1387 <entry id="subject">
1388 <internal token="subject"/>
1389 <external opt="none"/>
1390 </entry>
1391 <entry id="auth_used">
1392 <internal token="uauth"/>
1393 <external opt="required" type="char *"/>
1394 <comment>authorization used</comment>
1395 </entry>
1396 <entry id="fmri">
1397 <internal token="fmri"/>
1398 <external opt="required" type="char *"/>
1399 </entry>
1400 <entry id="type">
1401 <internal token="text"/>
1402 <external opt="required" type="char *"/>
1403 <comment>property group type</comment>
1404 </entry>
1405 <entry id="return">
1406 <internal token="return"/>
1407 <external opt="none"/>
1408 </entry>
1409 </event>
1411 <event id="AUE_smf_enable" instance_of="AUE_smf_generic" header="0"
1412 idNo="65" omit="JNI">
1413 <program>svc.configd(1M)</program>
1414 <see>svcadm(1M)</see>
1415 </event>
1416 <event id="AUE_smf_tmp_enable" instance_of="AUE_smf_generic" header="0"
1417 idNo="66" omit="JNI">
1418 <program>svc.configd(1M)</program>
1419 <see>svcadm(1M)</see>
1420 </event>
1421 <event id="AUE_smf_disable" instance_of="AUE_smf_generic" header="0"
1422 idNo="67" omit="JNI">
1423 <program>svc.configd(1M)</program>
1424 <see>svcadm(1M)</see>
1425 </event>
1426 <event id="AUE_smf_tmp_disable" instance_of="AUE_smf_generic" header="0"
1427 idNo="68" omit="JNI">
1428 <program>svc.configd(1M)</program>
1429 <see>svcadm(1M)</see>
1430 </event>
1431 <event id="AUE_smf_restart" instance_of="AUE_smf_generic" header="0"
1432 idNo="69" omit="JNI">
1433 <program>svc.configd(1M)</program>
1434 <see>svcadm(1M)</see>
1435 </event>
1436 <event id="AUE_smf_refresh" instance_of="AUE_smf_generic" header="0"
1437 idNo="70" omit="JNI">
1438 <program>svc.configd(1M)</program>
1439 <see>svcadm(1M)</see>
1440 </event>
1441 <event id="AUE_smf_clear" instance_of="AUE_smf_generic" header="0"
1442 idNo="71" omit="JNI">
1443 <program>svc.configd(1M)</program>
1444 <see>svcadm(1M)</see>
1445 </event>
1446 <event id="AUE_smf_degrade" instance_of="AUE_smf_generic" header="0"
1447 idNo="72" omit="JNI">
1448 <program>svc.configd(1M)</program>
1449 <see>svcadm(1M)</see>
1450 </event>
1451 <event id="AUE_smf_immediate_degrade" instance_of="AUE_smf_generic"
1452 header="0" idNo="73" omit="JNI">
1453 <program>svc.configd(1M)</program>
1454 <see>svcadm(1M)</see>
1455 </event>
1456 <event id="AUE_smf_maintenance" instance_of="AUE_smf_generic" header="0"
1457 idNo="74" omit="JNI">
1458 <program>svc.configd(1M)</program>
1459 <see>svcadm(1M)</see>
1460 </event>
1461 <event id="AUE_smf_immediate_maintenance" instance_of="AUE_smf_generic"
1462 header="0" idNo="75" omit="JNI">
1463 <program>svc.configd(1M)</program>
1464 <see>svcadm(1M)</see>
1465 </event>
1466 <event id="AUE_smf_immtmp_maintenance" instance_of="AUE_smf_generic"
1467 header="0" idNo="76" omit="JNI">
1468 <program>svc.configd(1M)</program>
1469 <see>svcadm(1M)</see>
1470 </event>
1471 <event id="AUE_smf_tmp_maintenance" instance_of="AUE_smf_generic" header="0"
1472 idNo="77" omit="JNI">
1473 <program>svc.configd(1M)</program>
1474 <see>svcadm(1M)</see>
1475 </event>
1476 <event id="AUE_smf_milestone" instance_of="AUE_smf_generic" header="0"
1477 idNo="78" omit="JNI">
1478 <program>svc.configd(1M)</program>
1479 <see>svcadm(1M)</see>
1480 </event>
1482 <event id="AUE_smf_create" instance_of="AUE_smf_generic" header="0"
1483 idNo="79" omit="JNI">
1484 <program>svc.configd(1M)</program>
1485 <see>svccfg(1M)</see>
1486 </event>
1487 <event id="AUE_smf_delete" instance_of="AUE_smf_generic" header="0"
1488 idNo="80" omit="JNI">
1489 <program>svc.configd(1M)</program>
1490 <see>svccfg(1M)</see>
1491 </event>
1493 <event id="AUE_smf_create_pg" instance_of="AUE_smf_generic_pg" header="0"
1494 idNo="81" omit="JNI">
1495 <program>svc.configd(1M)</program>
1496 <see>svccfg(1M)</see>
1497 </event>
1498 <event id="AUE_smf_create_npg" instance_of="AUE_smf_generic_pg" header="0"
1499 idNo="82" omit="JNI">
1500 <program>svc.configd(1M)</program>
1501 <see>svccfg(1M)</see>
1502 </event>
1503 <event id="AUE_smf_delete_pg" instance_of="AUE_smf_generic_pg" header="0"
1504 idNo="83" omit="JNI">
1505 <program>svc.configd(1M)</program>
1506 <see>svccfg(1M)</see>
1507 </event>
1508 <event id="AUE_smf_delete_npg" instance_of="AUE_smf_generic_pg" header="0"
1509 idNo="84" omit="JNI">
1510 <program>svc.configd(1M)</program>
1511 <see>svccfg(1M)</see>
1512 </event>
1514 <event id="AUE_smf_create_snap" header="0" idNo="85" omit="JNI">
1515 <program>svc.configd(1M)</program>
1516 <see>svccfg(1M)</see>
1517 <entry id="subject">
1518 <internal token="subject"/>
1519 <external opt="none"/>
1520 </entry>
1521 <entry id="auth_used">
1522 <internal token="uauth"/>
1523 <external opt="required" type="char *"/>
1524 <comment>authorization used</comment>
1525 </entry>
1526 <entry id="fmri">
1527 <internal token="fmri"/>
1528 <external opt="required" type="char *"/>
1529 <comment>name</comment>
1530 </entry>
1531 <entry id="name">
1532 <internal token="text"/>
1533 <external opt="required" type="char *"/>
1534 <comment>snapshot name</comment>
1535 </entry>
1536 <entry id="return">
1537 <internal token="return"/>
1538 <external opt="none"/>
1539 </entry>
1540 </event>
1541 <event id="AUE_smf_delete_snap" header="0" idNo="86" omit="JNI">
1542 <program>svc.configd(1M)</program>
1543 <see>svccfg(1M)</see>
1544 <entry id="subject">
1545 <internal token="subject"/>
1546 <external opt="none"/>
1547 </entry>
1548 <entry id="auth_used">
1549 <internal token="uauth"/>
1550 <external opt="required" type="char *"/>
1551 <comment>authorization used</comment>
1552 </entry>
1553 <entry id="fmri">
1554 <internal token="fmri"/>
1555 <external opt="required" type="char *"/>
1556 <comment>name</comment>
1557 </entry>
1558 <entry id="name">
1559 <internal token="text"/>
1560 <external opt="required" type="char *"/>
1561 <comment>snapshot name</comment>
1562 </entry>
1563 <entry id="return">
1564 <internal token="return"/>
1565 <external opt="none"/>
1566 </entry>
1567 </event>
1568 <event id="AUE_smf_attach_snap" header="0" idNo="87" omit="JNI">
1569 <program>svc.configd(1M)</program>
1570 <see>svccfg(1M)</see>
1571 <entry id="subject">
1572 <internal token="subject"/>
1573 <external opt="none"/>
1574 </entry>
1575 <entry id="auth_used">
1576 <internal token="uauth"/>
1577 <external opt="required" type="char *"/>
1578 <comment>authorization used</comment>
1579 </entry>
1580 <entry id="old_fmri">
1581 <internal token="fmri"/>
1582 <external opt="required" type="char *"/>
1583 <comment>old name</comment>
1584 </entry>
1585 <entry id="old_name">
1586 <internal token="text"/>
1587 <external opt="required" type="char *"/>
1588 <comment>old snapshot</comment>
1589 </entry>
1590 <entry id="new_fmri">
1591 <internal token="fmri"/>
1592 <external opt="required" type="char *"/>
1593 <comment>new name</comment>
1594 </entry>
1595 <entry id="new_name">
1596 <internal token="text"/>
1597 <external opt="required" type="char *"/>
1598 <comment>new snapshot</comment>
1599 </entry>
1600 <entry id="return">
1601 <internal token="return"/>
1602 <external opt="none"/>
1603 </entry>
1604 </event>
1606 <event id="AUE_smf_annotation" header="0" idNo="88" omit="JNI">
1607 <program>svc.configd(1M)</program>
1608 <see>svccfg(1M)</see>
1609 <entry id="subject">
1610 <internal token="subject"/>
1611 <external opt="none"/>
1612 </entry>
1613 <entry id="operation">
1614 <internal token="text"/>
1615 <external opt="required" type="char *"/>
1616 <comment>operation</comment>
1617 </entry>
1618 <entry id="file">
1619 <internal token="path"/>
1620 <external opt="required" type="char *"/>
1621 <comment>imported file</comment>
1622 </entry>
1623 <entry id="return">
1624 <internal token="return"/>
1625 <external opt="none"/>
1626 </entry>
1627 </event>
1629 <event id="AUE_smf_create_prop" header="0" idNo="89" omit="JNI">
1630 <program>svc.configd(1M)</program>
1631 <see>svccfg(1M)</see>
1632 <entry id="subject">
1633 <internal token="subject"/>
1634 <external opt="none"/>
1635 </entry>
1636 <entry id="auth_used">
1637 <internal token="uauth"/>
1638 <external opt="required" type="char *"/>
1639 <comment>authorization used</comment>
1640 </entry>
1641 <entry id="fmri">
1642 <internal token="fmri"/>
1643 <external opt="required" type="char *"/>
1644 <comment>name</comment>
1645 </entry>
1646 <entry id="type">
1647 <internal token="text"/>
1648 <external opt="required" type="char *"/>
1649 <comment>type</comment>
1650 </entry>
1651 <entry id="value">
1652 <internal token="text"/>
1653 <external opt="optional" type="char *"/>
1654 <comment>value</comment>
1655 </entry>
1656 <entry id="return">
1657 <internal token="return"/>
1658 <external opt="none"/>
1659 </entry>
1660 </event>
1662 <event id="AUE_smf_change_prop" header="0" idNo="90" omit="JNI">
1663 <program>svc.configd(1M)</program>
1664 <see>svccfg(1M)</see>
1665 <entry id="subject">
1666 <internal token="subject"/>
1667 <external opt="none"/>
1668 </entry>
1669 <entry id="auth_used">
1670 <internal token="uauth"/>
1671 <external opt="required" type="char *"/>
1672 <comment>authorization used</comment>
1673 </entry>
1674 <entry id="fmri">
1675 <internal token="fmri"/>
1676 <external opt="required" type="char *"/>
1677 <comment>name</comment>
1678 </entry>
1679 <entry id="type">
1680 <internal token="text"/>
1681 <external opt="required" type="char *"/>
1682 <comment>type</comment>
1683 </entry>
1684 <entry id="value">
1685 <internal token="text"/>
1686 <external opt="optional" type="char *"/>
1687 <comment>value</comment>
1688 </entry>
1689 <entry id="return">
1690 <internal token="return"/>
1691 <external opt="none"/>
1692 </entry>
1693 </event>
1694 <event id="AUE_smf_delete_prop" header="0" idNo="91" omit="JNI">
1695 <program>svc.configd(1M)</program>
1696 <see>svccfg(1M)</see>
1697 <entry id="subject">
1698 <internal token="subject"/>
1699 <external opt="none"/>
1700 </entry>
1701 <entry id="auth_used">
1702 <internal token="uauth"/>
1703 <external opt="required" type="char *"/>
1704 <comment>authorization used</comment>
1705 </entry>
1706 <entry id="fmri">
1707 <internal token="fmri"/>
1708 <external opt="required" type="char *"/>
1709 <comment>name</comment>
1710 </entry>
1711 <entry id="return">
1712 <internal token="return"/>
1713 <external opt="none"/>
1714 </entry>
1715 </event>
1717 <event id="AUE_smf_read_prop" instance_of="AUE_smf_generic" header="0"
1718 idNo="92" omit="JNI">
1719 <program>svc.configd(1M)</program>
1720 <see>svccfg(1M)</see>
1721 </event>
1723 <!-- CPUFreq related events -->
1725 <event id="AUE_cpu_ondemand" header="0" idNo="93" omit="JNI">
1726 <title>set CPU freq to minimal unless load increases</title>
1727 <program>/usr/lib/hal/hald-addon-cpufreq</program>
1728 <see>hald(1M)</see>
1729 <entry id="subject">
1730 <internal token="subject"/>
1731 <external opt="none"/>
1732 </entry>
1733 <entry id="auth_used">
1734 <internal token="uauth"/>
1735 <external opt="required" type="char *"/>
1736 <comment>authorization used</comment>
1737 </entry>
1738 <entry id="return">
1739 <internal token="return"/>
1740 <external opt="none"/>
1741 </entry>
1742 </event>
1743 <event id="AUE_cpu_performance" header="0" idNo="94" omit="JNI">
1744 <title>set CPU freq to Max</title>
1745 <program>/usr/lib/hal/hald-addon-cpufreq</program>
1746 <see>hald(1M)</see>
1747 <entry id="subject">
1748 <internal token="subject"/>
1749 <external opt="none"/>
1750 </entry>
1751 <entry id="auth_used">
1752 <internal token="uauth"/>
1753 <external opt="required" type="char *"/>
1754 <comment>authorization used</comment>
1755 </entry>
1756 <entry id="return">
1757 <internal token="return"/>
1758 <external opt="none"/>
1759 </entry>
1760 </event>
1761 <event id="AUE_cpu_threshold" header="0" idNo="95" omit="JNI">
1762 <title>set CPU frequency threshold percentage</title>
1763 <program>/usr/lib/hal/hald-addon-cpufreq</program>
1764 <see>hald(1M)</see>
1765 <entry id="subject">
1766 <internal token="subject"/>
1767 <external opt="none"/>
1768 </entry>
1769 <entry id="auth_used">
1770 <internal token="uauth"/>
1771 <external opt="required" type="char *"/>
1772 <comment>authorization used</comment>
1773 </entry>
1774 <entry id="threshold">
1775 <internal token="text"/>
1776 <external opt="required" type="int"/>
1777 <comment>threshold percent 1-100</comment>
1778 </entry>
1779 <entry id="return">
1780 <internal token="return"/>
1781 <external opt="none"/>
1782 </entry>
1783 </event>
1785 <!-- TPM events recorded by tcsd(8) -->
1787 <event id="AUE_generic_tpm" type="generic" omit="always">
1788 <entry id="subject">
1789 <internal token="subject"/>
1790 <external opt="none"/>
1791 </entry>
1792 <entry id="message">
1793 <internal token="text"/>
1794 <external opt="optional" type="msg tpm_e"/>
1795 <comment>TPM error message</comment>
1796 </entry>
1797 <entry id="return">
1798 <internal token="return"/>
1799 <external opt="none"/>
1800 </entry>
1801 </event>
1803 <event id="AUE_tpm_takeownership" instance_of="AUE_generic_tpm"
1804 header="0" idNo="99" omit="JNI">
1805 <title>TPM_TakeOwnership</title>
1806 <program>/usr/lib/tcsd</program>
1807 <see>tcsd(8)</see>
1808 </event>
1809 <event id="AUE_tpm_setoperatorauth" instance_of="AUE_generic_tpm"
1810 header="0" idNo="100" omit="JNI">
1811 <title>TPM_SetOperatorAuth</title>
1812 <program>/usr/lib/tcsd</program>
1813 <see>tcsd(8)</see>
1814 </event>
1815 <event id="AUE_tpm_setownerinstall" instance_of="AUE_generic_tpm"
1816 header="0" idNo="101" omit="JNI">
1817 <title>TPM_SetOwnerInstall</title>
1818 <program>/usr/lib/tcsd</program>
1819 <see>tcsd(8)</see>
1820 </event>
1821 <event id="AUE_tpm_selftestfull" instance_of="AUE_generic_tpm"
1822 header="0" idNo="102" omit="JNI">
1823 <title>TPM_SelfTestFull</title>
1824 <program>/usr/lib/tcsd</program>
1825 <see>tcsd(8)</see>
1826 </event>
1827 <event id="AUE_tpm_certifyselftest" instance_of="AUE_generic_tpm"
1828 header="0" idNo="103" omit="JNI">
1829 <title>TPM_CertifySelfTest</title>
1830 <program>/usr/lib/tcsd</program>
1831 <see>tcsd(8)</see>
1832 </event>
1833 <event id="AUE_tpm_continueselftest" instance_of="AUE_generic_tpm"
1834 header="0" idNo="104" omit="JNI">
1835 <title>TPM_ContinueSelfTest</title>
1836 <program>/usr/lib/tcsd</program>
1837 <see>tcsd(8)</see>
1838 </event>
1839 <event id="AUE_tpm_ownersetdisable" instance_of="AUE_generic_tpm"
1840 header="0" idNo="105" omit="JNI">
1841 <title>TPM_OwnerSetDisable</title>
1842 <program>/usr/lib/tcsd</program>
1843 <see>tcsd(8)</see>
1844 </event>
1845 <event id="AUE_tpm_ownerclear" instance_of="AUE_generic_tpm"
1846 header="0" idNo="106" omit="JNI">
1847 <title>TPM_OwnerClear</title>
1848 <program>/usr/lib/tcsd</program>
1849 <see>tcsd(8)</see>
1850 </event>
1851 <event id="AUE_tpm_disableownerclear" instance_of="AUE_generic_tpm"
1852 header="0" idNo="107" omit="JNI">
1853 <title>TPM_DisableOwnerClear</title>
1854 <program>/usr/lib/tcsd</program>
1855 <see>tcsd(8)</see>
1856 </event>
1857 <event id="AUE_tpm_forceclear" instance_of="AUE_generic_tpm"
1858 header="0" idNo="108" omit="JNI">
1859 <title>TPM_ForceClear</title>
1860 <program>/usr/lib/tcsd</program>
1861 <see>tcsd(8)</see>
1862 </event>
1863 <event id="AUE_tpm_disableforceclear" instance_of="AUE_generic_tpm"
1864 header="0" idNo="109" omit="JNI">
1865 <title>TPM_DisableForceClear</title>
1866 <program>/usr/lib/tcsd</program>
1867 <see>tcsd(8)</see>
1868 </event>
1869 <event id="AUE_tpm_physicaldisable" instance_of="AUE_generic_tpm"
1870 header="0" idNo="110" omit="JNI">
1871 <title>TPM_PhysicalDisable</title>
1872 <program>/usr/lib/tcsd</program>
1873 <see>tcsd(8)</see>
1874 </event>
1875 <event id="AUE_tpm_physicalenable" instance_of="AUE_generic_tpm"
1876 header="0" idNo="111" omit="JNI">
1877 <title>TPM_PhysicalEnsable</title>
1878 <program>/usr/lib/tcsd</program>
1879 <see>tcsd(8)</see>
1880 </event>
1881 <event id="AUE_tpm_physicaldeactivate" instance_of="AUE_generic_tpm"
1882 header="0" idNo="112" omit="JNI">
1883 <title>TPM_PhysicalSetDeactivated</title>
1884 <program>/usr/lib/tcsd</program>
1885 <see>tcsd(8)</see>
1886 </event>
1887 <event id="AUE_tpm_settempdeactivated" instance_of="AUE_generic_tpm"
1888 header="0" idNo="113" omit="JNI">
1889 <title>TPM_SetTempDeactivated</title>
1890 <program>/usr/lib/tcsd</program>
1891 <see>tcsd(8)</see>
1892 </event>
1893 <event id="AUE_tpm_physicalpresence" instance_of="AUE_generic_tpm"
1894 header="0" idNo="114" omit="JNI">
1895 <title>TPM_PhysicalPresence</title>
1896 <program>/usr/lib/tcsd</program>
1897 <see>tcsd(8)</see>
1898 </event>
1899 <event id="AUE_tpm_fieldupgrade" instance_of="AUE_generic_tpm"
1900 header="0" idNo="115" omit="JNI">
1901 <title>TPM_FieldUpgrade</title>
1902 <program>/usr/lib/tcsd</program>
1903 <see>tcsd(8)</see>
1904 </event>
1905 <event id="AUE_tpm_resetlockvalue" instance_of="AUE_generic_tpm"
1906 header="0" idNo="116" omit="JNI">
1907 <title>TPM_ResetLockValue</title>
1908 <program>/usr/lib/tcsd</program>
1909 <see>tcsd(8)</see>
1910 </event>
1912 <!-- hotplug events recorded by hotplugd(1m) -->
1914 <event id="AUE_hotplug_state" header="0" idNo="117" omit="JNI">
1915 <title>change hotplug connection state</title>
1916 <program>/usr/lib/hotplugd</program>
1917 <see>hotplugd(1M)</see>
1918 <entry id="subject">
1919 <internal token="subject"/>
1920 <external opt="none"/>
1921 </entry>
1922 <entry id="auth_used">
1923 <internal token="uauth"/>
1924 <external opt="required" type="char *"/>
1925 <comment>authorization used</comment>
1926 </entry>
1927 <entry id="device_path">
1928 <internal token="path"/>
1929 <external opt="required" type="char *"/>
1930 <comment>device path</comment>
1931 </entry>
1932 <entry id="connection">
1933 <internal token="text"/>
1934 <external opt="required" type="char *"/>
1935 <comment>connector or port</comment>
1936 </entry>
1937 <entry id="new_state">
1938 <internal token="text"/>
1939 <external opt="required" type="char *"/>
1940 <comment>new connection state</comment>
1941 </entry>
1942 <entry id="old_state">
1943 <internal token="text"/>
1944 <external opt="required" type="char *"/>
1945 <comment>old connection state</comment>
1946 </entry>
1947 <entry id="return">
1948 <internal token="return"/>
1949 <external opt="none"/>
1950 </entry>
1951 </event>
1953 <event id="AUE_hotplug_set" header="0" idNo="118" omit="JNI">
1954 <title>set hotplug bus private options</title>
1955 <program>/usr/lib/hotplugd</program>
1956 <see>hotplugd(1M)</see>
1957 <entry id="subject">
1958 <internal token="subject"/>
1959 <external opt="none"/>
1960 </entry>
1961 <entry id="auth_used">
1962 <internal token="uauth"/>
1963 <external opt="required" type="char *"/>
1964 <comment>authorization used</comment>
1965 </entry>
1966 <entry id="device_path">
1967 <internal token="path"/>
1968 <external opt="required" type="char *"/>
1969 <comment>device path</comment>
1970 </entry>
1971 <entry id="connection">
1972 <internal token="text"/>
1973 <external opt="required" type="char *"/>
1974 <comment>connector or port</comment>
1975 </entry>
1976 <entry id="options">
1977 <internal token="text"/>
1978 <external opt="required" type="char *"/>
1979 <comment>bus private options</comment>
1980 </entry>
1981 <entry id="return">
1982 <internal token="return"/>
1983 <external opt="none"/>
1984 </entry>
1985 </event>
1987 <event id="AUE_ilb_create_healthcheck" header="0" idNo="120" omit="JNI">
1988 <title>Create Integrated Loadbalancer healthcheck object</title>
1989 <program>/usr/sbin/ilbadm</program>
1990 <see>ilbadm(1m)</see>
1991 <entry id="subject">
1992 <internal token="subject"/>
1993 <external opt="none"/>
1994 </entry>
1995 <entry id="auth_used">
1996 <internal token="uauth"/>
1997 <external opt="required" type="char *"/>
1998 <comment>authorization used</comment>
1999 </entry>
2000 <entry id="hc_test">
2001 <internal token="path"/>
2002 <external opt="required" type="char *"/>
2003 <comment>healthcheck type-PING,TCP,UDP or 3rd party script</comment>
2004 </entry>
2005 <entry id="hc_name">
2006 <internal token="text"/>
2007 <external opt="required" type="char *"/>
2008 <comment>healthcheck name</comment>
2009 </entry>
2010 <entry id="hc_timeout">
2011 <internal token="text"/>
2012 <external opt="required" type="int32_t" />
2013 <comment>timeout(secs) to kill a hung healthcheck probe
2014 - 0 means default value (see man page)
2015 </comment>
2016 </entry>
2017 <entry id="hc_count">
2018 <internal token="text"/>
2019 <external opt="required" type="int"/>
2020 <comment>number of times to run a health check probe
2021 before declaring a server to be dead - 0 means
2022 default value (see man page)
2023 </comment>
2024 </entry>
2025 <entry id="hc_interval">
2026 <internal token="text"/>
2027 <external opt="required" type="int32_t"/>
2028 <comment>time(secs) between 2 healthcheck events -
2029 0 means default value(see man page)
2030 </comment>
2031 </entry>
2032 <entry id="return">
2033 <internal token="return"/>
2034 <external opt="none"/>
2035 </entry>
2036 </event>
2038 <event id="AUE_ilb_delete_healthcheck" header="0" idNo="121" omit="JNI">
2039 <title>Delete Integrated Loadbalancer healthcheck object</title>
2040 <program>/usr/sbin/ilbadm</program>
2041 <see>ilbadm(1m)</see>
2042 <entry id="subject">
2043 <internal token="subject"/>
2044 <external opt="none"/>
2045 </entry>
2046 <entry id="auth_used">
2047 <internal token="uauth"/>
2048 <external opt="required" type="char *"/>
2049 <comment>authorization used</comment>
2050 </entry>
2051 <entry id="hc_name">
2052 <internal token="text"/>
2053 <external opt="required" type="char *"/>
2054 <comment>healthcheck name</comment>
2055 </entry>
2056 <entry id="return">
2057 <internal token="return"/>
2058 <external opt="none"/>
2059 </entry>
2060 </event>
2062 <event id="AUE_ilb_create_rule" header="0" idNo="122" omit="JNI">
2063 <title>Create Integrated Loadbalancer rule</title>
2064 <program>/usr/sbin/ilbadm</program>
2065 <see>ilbadm(1m)</see>
2066 <entry id="subject">
2067 <internal token="subject"/>
2068 <external opt="none"/>
2069 </entry>
2070 <entry id="auth_used">
2071 <internal token="uauth"/>
2072 <external opt="required" type="char *"/>
2073 <comment>authorization used</comment>
2074 </entry>
2075 <entry id="virtual_ipaddress_type,virtual_ipaddress">
2076 <internal token="in_remote"/>
2077 <external opt="required" type="int32_t,uint32_t[4]"/>
2078 <comment>LB virtual IP address</comment>
2079 </entry>
2080 <entry id="min_port">
2081 <internal token="iport"/>
2082 <external opt="required" type="uint16_t"/>
2083 <comment>minimum value in port range</comment>
2084 </entry>
2085 <entry id="max_port">
2086 <internal token="iport"/>
2087 <external opt="required" type="uint16_t"/>
2088 <comment>maximum value in port range - max=min means single
2089 port is specified
2090 </comment>
2091 </entry>
2092 <entry id="protocol">
2093 <internal token="text"/>
2094 <external opt="required" type="char *"/>
2095 <comment>protocol</comment>
2096 </entry>
2097 <entry id="algo_optype">
2098 <internal token="text"/>
2099 <external opt="required" type="char *"/>
2100 <comment>[rr,hip,hipp,hipv],[dsr,nat,half-nat]</comment>
2101 </entry>
2102 <entry id="proxy_src_min_type,proxy_src_min">
2103 <internal token="in_remote"/>
2104 <external opt="optional" type="int32_t,uint32_t[4]"/>
2105 <comment>min value for proxy source address for NAT</comment>
2106 </entry>
2107 <entry id="proxy_src_max_type,proxy_src_max">
2108 <internal token="in_remote"/>
2109 <external opt="optional" type="int32_t,uint32_t[4]"/>
2110 <comment>max value in proxy source address range for NAT
2111 - max=min means single address is specified
2112 </comment>
2113 </entry>
2114 <entry id="persist_mask">
2115 <internal token="text"/>
2116 <external opt="required" type="char *"/>
2117 <comment>prefix length</comment>
2118 </entry>
2119 <entry id="hcname">
2120 <internal token="text"/>
2121 <external opt="optional" type="char *"/>
2122 <comment>healthcheck name</comment>
2123 </entry>
2124 <entry id="hcport">
2125 <internal token="text"/>
2126 <external opt="optional" type="char *"/>
2127 <comment>healthcheck port - ANY(dynamically determined by ilbd)
2128 or a positive integer
2129 </comment>
2130 </entry>
2131 <entry id="conndrain_timeout">
2132 <internal token="text"/>
2133 <external opt="required" type="uint32_t"/>
2134 <comment>connection timeout for NAT/half-NAT in sec. - 0 means
2135 no forced removal)
2136 </comment>
2137 </entry>
2138 <entry id="nat_timeout">
2139 <internal token="text"/>
2140 <external opt="required" type="uint32_t"/>
2141 <comment>nat entry timeout for NAT/half-NAT in sec - 0 means
2142 default value(see man page)
2143 </comment>
2144 </entry>
2145 <entry id="persist_timeout">
2146 <internal token="text"/>
2147 <external opt="required" type="uint32_t"/>
2148 <comment>session persistence mapping in sec - 0 means no
2149 persistence
2150 </comment>
2151 </entry>
2152 <entry id="server_group">
2153 <internal token="text"/>
2154 <external opt="required" type="char *"/>
2155 <comment>server group name</comment>
2156 </entry>
2157 <entry id="rule_name">
2158 <internal token="text"/>
2159 <external opt="required" type="char *"/>
2160 <comment>rule name</comment>
2161 </entry>
2162 <entry id="return">
2163 <internal token="return"/>
2164 <external opt="none"/>
2165 </entry>
2166 </event>
2168 <!-- generic ILB rule event -->
2170 <event id="AUE_generic_ILB_rule" type="generic" omit="always">
2171 <entry id="subject">
2172 <internal token="subject"/>
2173 <external opt="none"/>
2174 </entry>
2175 <entry id="auth_used">
2176 <internal token="uauth"/>
2177 <external opt="required" type="char *"/>
2178 <comment>authorization used</comment>
2179 </entry>
2180 <entry id="rule_name">
2181 <internal token="text"/>
2182 <external opt="required" type="char *"/>
2183 <comment>rule name - "all" means all rules</comment>
2184 </entry>
2185 <entry id="return">
2186 <internal token="return"/>
2187 <external opt="none"/>
2188 </entry>
2189 </event>
2191 <!-- instances of the ILB generic rule event. -->
2192 <event id="AUE_ilb_delete_rule" instance_of="AUE_generic_ILB_rule"
2193 header="0" idNo="123">
2194 <title>Delete Integrated Loadbalancer rule</title>
2195 <program>/usr/sbin/ilbadm</program>
2196 <see>ilbadm(1m)</see>
2197 </event>
2199 <event id="AUE_ilb_disable_rule" instance_of="AUE_generic_ILB_rule"
2200 header="0" idNo="124">
2201 <title>Disable Integrated Loadbalancer rule</title>
2202 <program>/usr/sbin/ilbadm</program>
2203 <see>ilbadm(1m)</see>
2204 </event>
2206 <event id="AUE_ilb_enable_rule" instance_of="AUE_generic_ILB_rule"
2207 header="0" idNo="125">
2208 <title>Enable Integrated Loadbalancer rule</title>
2209 <program>/usr/sbin/ilbadm</program>
2210 <see>ilbadm(1m)</see>
2211 </event>
2213 <event id="AUE_ilb_add_server" header="0" idNo="126" omit="JNI">
2214 <title>Add server to Integrated Loadbalancer</title>
2215 <program>/usr/sbin/ilbadm</program>
2216 <see>ilbadm(1m)</see>
2217 <entry id="subject">
2218 <internal token="subject"/>
2219 <external opt="none"/>
2220 </entry>
2221 <entry id="auth_used">
2222 <internal token="uauth"/>
2223 <external opt="required" type="char *"/>
2224 <comment>authorization used</comment>
2225 </entry>
2226 <entry id="server_ipaddress_type,server_ipaddress">
2227 <internal token="in_remote"/>
2228 <external opt="required" type="int32_t,uint32_t[4]"/>
2229 <comment>IP address</comment>
2230 </entry>
2231 <entry id="server_id">
2232 <internal token="text"/>
2233 <external opt="optional" type="char *"/>
2234 <comment>serverid that corresponds IP address - empty
2235 if authorization fails, user specified IP address
2236 is invalid or server cannot be added because
2237 server group is full
2238 </comment>
2239 </entry>
2240 <entry id="server_group">
2241 <internal token="text"/>
2242 <external opt="required" type="char *"/>
2243 <comment>server group name</comment>
2244 </entry>
2245 <entry id="server_minport">
2246 <internal token="iport"/>
2247 <external opt="optional" type="uint16_t" />
2248 <comment>server's minimum value in port range - empty
2249 means default value (see man page)
2250 </comment>
2251 </entry>
2252 <entry id="server_maxport">
2253 <internal token="iport"/>
2254 <external opt="optional" type="uint16_t" />
2255 <comment>server's maximum value in port range - empty
2256 means default value(see man page)
2257 </comment>
2258 </entry>
2259 <entry id="return">
2260 <internal token="return"/>
2261 <external opt="none"/>
2262 </entry>
2263 </event>
2265 <event id="AUE_ilb_disable_server" header="0" idNo="127" omit="JNI">
2266 <title>Disable server to Integrated Loadbalancer</title>
2267 <program>/usr/sbin/ilbadm</program>
2268 <see>ilbadm(1m)</see>
2269 <entry id="subject">
2270 <internal token="subject"/>
2271 <external opt="none"/>
2272 </entry>
2273 <entry id="auth_used">
2274 <internal token="uauth"/>
2275 <external opt="required" type="char *"/>
2276 <comment>authorization used</comment>
2277 </entry>
2278 <entry id="server_id">
2279 <internal token="text"/>
2280 <external opt="required" type="char *"/>
2281 <comment>serverid</comment>
2282 </entry>
2283 <entry id="server_ipaddress_type,server_ipaddress">
2284 <internal token="in_remote"/>
2285 <external opt="optional" type="int32_t,uint32_t[4]"/>
2286 <comment>IPaddr corresponding to the serverid - empty
2287 if authorization fails, or user specified serverid
2288 is nonexistent
2289 </comment>
2290 </entry>
2291 <entry id="return">
2292 <internal token="return"/>
2293 <external opt="none"/>
2294 </entry>
2295 </event>
2297 <event id="AUE_ilb_enable_server" header="0" idNo="128" omit="JNI">
2298 <title>Enable server to Integrated Loadbalancer</title>
2299 <program>/usr/sbin/ilbadm</program>
2300 <see>ilbadm(1m)</see>
2301 <entry id="subject">
2302 <internal token="subject"/>
2303 <external opt="none"/>
2304 </entry>
2305 <entry id="auth_used">
2306 <internal token="uauth"/>
2307 <external opt="required" type="char *"/>
2308 <comment>authorization used</comment>
2309 </entry>
2310 <entry id="server_id">
2311 <internal token="text"/>
2312 <external opt="required" type="char *"/>
2313 <comment>serverid</comment>
2314 </entry>
2315 <entry id="server_ipaddress_type,server_ipaddress">
2316 <internal token="in_remote"/>
2317 <external opt="optional" type="int32_t,uint32_t[4]"/>
2318 <comment>IPaddr corresponding to the serverid - empty
2319 if authorization fails, or user specified serverid
2320 is nonexistent
2321 </comment>
2322 </entry>
2323 <entry id="return">
2324 <internal token="return"/>
2325 <external opt="none"/>
2326 </entry>
2327 </event>
2329 <event id="AUE_ilb_remove_server" header="0" idNo="129" omit="JNI">
2330 <title>Remove server from Integrated Loadbalancer</title>
2331 <program>/usr/sbin/ilbadm</program>
2332 <see>ilbadm(1m)</see>
2333 <entry id="subject">
2334 <internal token="subject"/>
2335 <external opt="none"/>
2336 </entry>
2337 <entry id="auth_used">
2338 <internal token="uauth"/>
2339 <external opt="required" type="char *"/>
2340 <comment>authorization used</comment>
2341 </entry>
2342 <entry id="server_id">
2343 <internal token="text"/>
2344 <external opt="required" type="char *"/>
2345 <comment>serverid</comment>
2346 </entry>
2347 <entry id="server_group">
2348 <internal token="text"/>
2349 <external opt="required" type="char *"/>
2350 <comment>server group name</comment>
2351 </entry>
2352 <entry id="server_ipaddress_type,server_ipaddress">
2353 <internal token="in_remote"/>
2354 <external opt="optional" type="int32_t,uint32_t[4]"/>
2355 <comment>IPaddr corresponding to serverid - empty
2356 if authorization fails or user specified serverid
2357 serverid is nonexistent
2358 </comment>
2359 </entry>
2360 <entry id="return">
2361 <internal token="return"/>
2362 <external opt="none"/>
2363 </entry>
2364 </event>
2366 <event id="AUE_ilb_create_servergroup" header="0" idNo="130" omit="JNI">
2367 <title>Create server group for Integrated Loadbalancer</title>
2368 <program>/usr/sbin/ilbadm</program>
2369 <see>ilbadm(1m)</see>
2370 <entry id="subject">
2371 <internal token="subject"/>
2372 <external opt="none"/>
2373 </entry>
2374 <entry id="auth_used">
2375 <internal token="uauth"/>
2376 <external opt="required" type="char *"/>
2377 <comment>authorization used</comment>
2378 </entry>
2379 <entry id="server_group">
2380 <internal token="text"/>
2381 <external opt="required" type="char *"/>
2382 <comment>server group name</comment>
2383 </entry>
2384 <entry id="return">
2385 <internal token="return"/>
2386 <external opt="none"/>
2387 </entry>
2388 </event>
2390 <event id="AUE_ilb_delete_servergroup" header="0" idNo="131" omit="JNI">
2391 <title>Delete server group from Integrated Loadbalancer</title>
2392 <program>/usr/sbin/ilbadm</program>
2393 <see>ilbadm(1m)</see>
2394 <entry id="subject">
2395 <internal token="subject"/>
2396 <external opt="none"/>
2397 </entry>
2398 <entry id="auth_used">
2399 <internal token="uauth"/>
2400 <external opt="required" type="char *"/>
2401 <comment>authorization used</comment>
2402 </entry>
2403 <entry id="server_group">
2404 <internal token="text"/>
2405 <external opt="required" type="char *"/>
2406 <comment>server group name</comment>
2407 </entry>
2408 <entry id="return">
2409 <internal token="return"/>
2410 <external opt="none"/>
2411 </entry>
2412 </event>
2414 <event id="AUE_nwam_enable" header="0" idNo="132" omit="JNI">
2415 <entry id="subject">
2416 <internal token="subject"/>
2417 <external opt="none"/>
2418 </entry>
2419 <entry id="profile_type">
2420 <internal token="text"/>
2421 <external opt="required" type="char *"/>
2422 <comment>Type of profile being enabled</comment>
2423 </entry>
2424 <entry id="profile_name">
2425 <internal token="text"/>
2426 <external opt="required" type="char *"/>
2427 <comment>Name of profile being enabled</comment>
2428 </entry>
2429 <entry id="return">
2430 <internal token="return"/>
2431 <external opt="none"/>
2432 </entry>
2433 </event>
2435 <event id="AUE_nwam_disable" header="0" idNo="133" omit="JNI">
2436 <entry id="subject">
2437 <internal token="subject"/>
2438 <external opt="none"/>
2439 </entry>
2440 <entry id="profile_type">
2441 <internal token="text"/>
2442 <external opt="required" type="char *"/>
2443 <comment>Type of profile being disabled</comment>
2444 </entry>
2445 <entry id="profile_name">
2446 <internal token="text"/>
2447 <external opt="required" type="char *"/>
2448 <comment>Name of profile being disabled</comment>
2449 </entry>
2450 <entry id="return">
2451 <internal token="return"/>
2452 <external opt="none"/>
2453 </entry>
2454 </event>
2456 <event id="AUE_netcfg_update" header="0" idNo="134" omit="JNI">
2457 <entry id="subject">
2458 <internal token="subject"/>
2459 <external opt="none"/>
2460 </entry>
2461 <entry id="parent_file">
2462 <internal token="text"/>
2463 <external opt="required" type="char *"/>
2464 <comment>Back-end data file being updated</comment>
2465 </entry>
2466 <entry id="object_name">
2467 <internal token="text"/>
2468 <external opt="required" type="char *"/>
2469 <comment>Name of object being updated</comment>
2470 </entry>
2471 <entry id="return">
2472 <internal token="return"/>
2473 <external opt="none"/>
2474 </entry>
2475 </event>
2477 <event id="AUE_netcfg_remove" header="0" idNo="135" omit="JNI">
2478 <entry id="subject">
2479 <internal token="subject"/>
2480 <external opt="none"/>
2481 </entry>
2482 <entry id="parent_file">
2483 <internal token="text"/>
2484 <external opt="required" type="char *"/>
2485 <comment>Back-end data file being modified</comment>
2486 </entry>
2487 <entry id="object_name">
2488 <internal token="text"/>
2489 <external opt="required" type="char *"/>
2490 <comment>Name of object being removed</comment>
2491 </entry>
2492 <entry id="return">
2493 <internal token="return"/>
2494 <external opt="none"/>
2495 </entry>
2496 </event>
2498 <!-- add new events here with the next higher idNo -->
2499 <!-- Highest idNo is 135, so next is 136, then fix this comment -->
2500 <!-- end of C Only events -->
2502 <!--
2503 token definitions are partially implemented. All they do for now
2504 is create a list of defined token names. In the future they may
2505 become a way of describing token structure.
2506 -->
2508 <token id="acl">
2509 </token>
2510 <token id="arbitrary">
2511 </token>
2512 <token id="arg">
2513 </token>
2514 <token id="attr">
2515 </token>
2516 <token id="command">
2517 </token>
2518 <token id="command_alt">
2519 </token>
2520 <token id="date">
2521 </token>
2522 <token id="exec_args">
2523 </token>
2524 <token id="exec_env">
2525 </token>
2526 <token id="exit">
2527 </token>
2528 <token id="file">
2529 </token>
2530 <token id="fmri">
2531 </token>
2532 <token id="groups">
2533 </token>
2534 <token id="secflags">
2535 </token>
2536 <!--
2537 the iport token take a single argument of type uint16_t
2538 if there are any other tokens following it that have arguments
2539 the last of the iport tokens in the event description must
2540 be followed by a dummy iport token that is optional.
2541 This is to ensure proper structure alignment across all
2542 compliers and architectures.
2543 -->
2544 <token id="iport">
2545 </token>
2546 <!-- pseudo token; in_addr and in_port of peer -->
2547 <token id="in_peer">
2548 </token>
2549 <!-- pseudo token; specified in_addr -->
2550 <token id="in_remote">
2551 </token>
2552 <token id="ipc">
2553 </token>
2554 <token id="ipc_perm">
2555 </token>
2556 <token id="newgroups">
2557 </token>
2558 <token id="opaque">
2559 </token>
2560 <token id="path">
2561 </token>
2562 <!-- pseudo token; path list generates 0 or more path tokens -->
2563 <token id="path_list">
2564 </token>
2565 <!--
2566 privilege token is implemented as one of the pseudo tokens
2567 priv_limit, priv_effective, or priv_inherit
2569 <token id="privilege">
2570 </token>
2571 -->
2572 <token id="priv_effective">
2573 </token>
2574 <token id="priv_inherit">
2575 </token>
2576 <token id="priv_limit">
2577 </token>
2578 <token id="process">
2579 </token>
2580 <token id="return">
2581 </token>
2582 <token id="seq">
2583 </token>
2584 <token id="socket">
2585 </token>
2586 <token id="socket-inet">
2587 </token>
2588 <token id="subject">
2589 </token>
2590 <token id="text">
2591 </token>
2592 <token id="tid">
2593 </token>
2594 <token id="uauth">
2595 </token>
2596 <token id="user">
2597 </token>
2598 <token id="zonename">
2599 </token>
2601 <!--
2602 error value list for return values with success/fail code of fail.
2603 These values start at 1000 so praudit can tell the difference
2604 between the libbsm/common/audit_*.c broken error values and
2605 the new adt_ error value list. It is public so that praudit
2606 can find it.
2608 praudit outputs "failure" %s" for these strings, so there is
2609 no need to use words such as "failed" in the message.
2611 ** Add to the end only to maintain validity across versions of
2612 the audit log. **
2613 -->
2615 <msg_list id="fail_value" header="0" start="1000" public="true">
2616 <msg id="PW_ATTR">Attribute update</msg>
2617 <msg id="PW">Password update</msg>
2618 <msg id="USERNAME">bad username</msg>
2619 <msg id="AUTH">authorization failed</msg>
2620 <msg id="UID">bad uid</msg>
2621 <msg id="UNKNOWN">unknown failure</msg>
2622 <msg id="EXPIRED">password expired</msg>
2623 <msg id="ACCOUNT_LOCKED">Account is locked</msg>
2624 <msg id="BAD_DIALUP">Bad dial up</msg>
2625 <msg id="BAD_ID">Invalid ID</msg>
2626 <msg id="BAD_PW">Invalid password</msg>
2627 <msg id="CONSOLE">Not on console</msg>
2628 <msg id="MAX_TRIES">Too many failed attempts</msg>
2629 <msg id="PROTOCOL_FAILURE">Protocol failure</msg>
2630 <msg id="EXCLUDED_USER">Excluded user</msg>
2631 <msg id="ANON_USER">No anonymous</msg>
2632 <msg id="BAD_CMD">Invalid command</msg>
2633 <msg id="BAD_TTY">Standard input not a tty line</msg>
2634 <msg id="PROGRAM">Program failure</msg>
2635 <msg id="CHDIR_FAILED">chdir to home directory</msg>
2636 <msg id="INPUT_OVERFLOW">Input line too long.</msg>
2637 <msg id="DEVICE_PERM">login device override</msg>
2638 <msg id="AUTH_BYPASS">authorization bypass</msg>
2639 <msg id="LOGIN_DISABLED">login disabled</msg>
2640 </msg_list>
2642 <!--
2643 The following empty list is used for PAM errors; the "start"
2644 value is used by praudit to know to use the PAM infrastructure
2645 for generating error strings
2646 -->
2647 <msg_list id="fail_pam" header="0" start="2000" public="true">
2648 </msg_list>
2650 <!--
2651 This is still in use by SMC. See AUE_generic_login. When
2652 either SMC is fixed to stop using this, or SMC goes away.
2653 REMOVE this stuff and the corresponding AUE_generic_login
2654 message field.
2656 Message list for the various authentication events, such
2657 as AUE_login and AUE_admin_authenticate. Add new entries
2658 at the end. The order of msg_list entries and the order
2659 of msg entries both affect the names in adt.h and the value
2660 of the associated enumerated types.
2662 Each of these messages except NO_MSG is also in the failure_attribute
2663 list; the difference is that the messages below use a text token
2664 in the audit record, while the failure_attribute messages are
2665 associated with the return value of the return token.
2667 This list is deprecated; please don't use text tokens for error
2668 messages.
2669 -->
2671 <msg_list id="login_text" header="0" deprecated="true">
2672 <msg id="NO_MSG"></msg>
2673 <msg id="ACCOUNT_LOCKED">Account is locked</msg>
2674 <msg id="BAD_DIALUP">Bad dial up</msg>
2675 <msg id="BAD_ID">Invalid ID</msg>
2676 <msg id="BAD_PW">Invalid password</msg>
2677 <msg id="CONSOLE">Not on console</msg>
2678 <msg id="MAX_TRIES">Too many failed attempts</msg>
2679 <msg id="PROTOCOL_FAILURE">Protocol failure</msg>
2680 <msg id="EXCLUDED_USER">Excluded user</msg>
2681 <msg id="ANON_USER">No anonymous</msg>
2682 </msg_list>
2684 <!-- msg list for uadmin(1m) fcn argument (next action, see uadmin(2)) -->
2685 <msg_list id="uadmin_fcn" header="0" start="3000" public="true">
2686 <msg id="AD_HALT">Halt the processor(s)</msg>
2687 <msg id="AD_POWEROFF">Halt the processor(s) and turn off the power</msg>
2688 <msg id="AD_BOOT">Reboot the system using the kernel file</msg>
2689 <msg id="AD_IBOOT">Interactive reboot</msg>
2690 <msg id="AD_SUSPEND_TO_DISK">Save the system state to the state file</msg>
2691 <msg id="AD_CHECK_SUSPEND_TO_DISK">Check if system supports suspend to disk</msg>
2692 <msg id="AD_FORCE">Force suspend to disk even when threads of user
2693 applications are not suspendable</msg>
2694 <msg id="AD_SUSPEND_TO_RAM">Save the system state to memory</msg>
2695 <msg id="AD_CHECK_SUSPEND_TO_RAM">Check if system supports suspend to memory</msg>
2696 <msg id="AD_SBOOT">Single-user reboot</msg>
2697 <msg id="AD_SIBOOT">Single-user interactive reboot</msg>
2698 <msg id="AD_NOSYNC">Do not sync filesystems on next A_DUMP</msg>
2699 <msg id="AD_FASTREBOOT">Reboot bypassing BIOS and boot loader</msg>
2700 <msg id="AD_FASTREBOOT_DRYRUN">Check if system supports reboot bypassing BIOS and boot loader</msg>
2701 <msg id="AD_UPDATE_BOOT_CONFIG">Update boot configuration parameters</msg>
2702 <msg id="AD_REUSEINIT">Prepare for AD_REUSABLE</msg>
2703 <msg id="AD_REUSABLE">Create reusable statefile</msg>
2704 <msg id="AD_REUSEFINI">Revert to normal CPR mode (not reusable)</msg>
2705 <msg id="AD_FTRACE_START">ftrace start</msg>
2706 <msg id="AD_FTRACE_STOP">ftrace stop</msg>
2707 </msg_list>
2709 <!--
2710 msg list for TPM errors that will be reported by tcsd(8).
2711 This list must match the order of the TPM_E_* error codes defined
2712 in /usr/include/tss/tpm_error.h (SUNWtss package)
2713 -->
2714 <msg_list id="tpm_e" header="0" start="4000" public="true">
2715 <msg id="AUTHFAIL">Authentication failed</msg>
2716 <msg id="BADINDEX">The index to a PCR, DIR or other register is incorrect</msg>
2717 <msg id="BAD_PARAMETER">One or more parameter is bad</msg>
2718 <msg id="AUDITFAILURE">auditing of the operation failed.</msg>
2719 <msg id="CLEAR_DISABLED">clear operations now physical access</msg>
2720 <msg id="DEACTIVATED">The TPM is deactivated</msg>
2721 <msg id="DISABLED">The TPM is disabled</msg>
2722 <msg id="DISABLED_CMD">The target command has been disabled</msg>
2723 <msg id="FAIL">The operation failed</msg>
2724 <msg id="BAD_ORDINAL">The ordinal was unknown or inconsistent</msg>
2725 <msg id="INSTALL_DISABLED">The ability to install an owner is disabled</msg>
2726 <msg id="INVALID_KEYHANDLE">The key handle can not be interpreted</msg>
2727 <msg id="KEYNOTFOUND">The key handle points to an invalid key</msg>
2728 <msg id="INAPPROPRIATE_ENC">Unacceptable encryption scheme</msg>
2729 <msg id="MIGRATEFAIL">Migration authorization failed</msg>
2730 <msg id="INVALID_PCR_INFO">PCR information could not be interpreted</msg>
2731 <msg id="NOSPACE">No room to load key.</msg>
2732 <msg id="NOSRK">There is no SRK set</msg>
2733 <msg id="NOTSEALED_BLOB">An encrypted blob is invalid or was
2734 not created by this TPM</msg>
2735 <msg id="OWNER_SET">There is already an Owner </msg>
2736 <msg id="RESOURCES">The TPM has insufficient internal resources</msg>
2737 <msg id="SHORTRANDOM">A random string was too short</msg>
2738 <msg id="SIZE">The TPM does not have the space to perform the operation.</msg>
2739 <msg id="WRONGPCRVAL">The named PCR value does not match the current PCR value.</msg>
2740 <msg id="BAD_PARAM_SIZE">The paramSize argument has the incorrect value </msg>
2741 <msg id="SHA_THREAD">There is no existing SHA-1 thread.</msg>
2742 <msg id="SHA_ERROR">SHA-1 thread encountered an error.</msg>
2743 <msg id="FAILEDSELFTEST">Self-test has failed and the TPM has shutdown.</msg>
2744 <msg id="AUTH2FAIL">The auth for the second key failed authorization</msg>
2745 <msg id="BADTAG">The tag value sent to for a command is invalid</msg>
2746 <msg id="IOERROR">An IO error occurred transmitting information to the TPM</msg>
2747 <msg id="ENCRYPT_ERROR">The encryption process had a problem.</msg>
2748 <msg id="DECRYPT_ERROR">The decryption process did not complete.</msg>
2749 <msg id="INVALID_AUTHHANDLE">An invalid handle was used.</msg>
2750 <msg id="NO_ENDORSEMENT">The TPM does not a EK installed</msg>
2751 <msg id="INVALID_KEYUSAGE">The usage of a key is not allowed</msg>
2752 <msg id="WRONG_ENTITYTYPE">The submitted entity type is not allowed</msg>
2753 <msg id="INVALID_POSTINIT">The command was received in the wrong sequence</msg>
2754 <msg id="INAPPROPRIATE_SIG">Signed data cannot include additional DER information</msg>
2755 <msg id="BAD_KEY_PROPERTY">The key properties are not supported by this TPM</msg>
2756 <msg id="BAD_MIGRATION">The migration properties of this key are incorrect.</msg>
2757 <msg id="BAD_SCHEME">Incorrect signature or encryption scheme</msg>
2758 <msg id="BAD_DATASIZE">The size of the data parameter is bad</msg>
2759 <msg id="BAD_MODE">A mode parameter is bad</msg>
2760 <msg id="BAD_PRESENCE">physicalPresence or physicalPresenceLock bits have wrong value</msg>
2761 <msg id="BAD_VERSION">The TPM cannot perform this version of the capability</msg>
2762 <msg id="NO_WRAP_TRANSPORT">The TPM does not allow for wrapped transport sessions</msg>
2763 <msg id="AUDITFAIL_UNSUCCESSFUL">TPM audit construction failed for failed command</msg>
2764 <msg id="AUDITFAIL_SUCCESSFUL">TPM audit construction failed for successful command</msg>
2765 <msg id="NOTRESETABLE">PCR register does not have the resettable attribute</msg>
2766 <msg id="NOTLOCAL">PCR register requires locality</msg>
2767 <msg id="BAD_TYPE">Make identity blob not properly typed</msg>
2768 <msg id="INVALID_RESOURCE">Resource type does not match actual resource</msg>
2769 <msg id="NOTFIPS">Command only available when TPM is in FIPS mode</msg>
2770 <msg id="INVALID_FAMILY">The command is attempting to use an invalid family ID</msg>
2771 <msg id="NO_NV_PERMISSION">The permission to manipulate the NV storage is not available</msg>
2772 <msg id="REQUIRES_SIGN">The operation requires a signed command</msg>
2773 <msg id="KEY_NOTSUPPORTED">Wrong operation to load an NV key</msg>
2774 <msg id="AUTH_CONFLICT">NV_LoadKey blob requires both owner and blob authorization</msg>
2775 <msg id="AREA_LOCKED">The NV area is locked and not writable</msg>
2776 <msg id="BAD_LOCALITY">The locality is incorrect for the attempted operation</msg>
2777 <msg id="READ_ONLY">The NV area is read only and can't be written to</msg>
2778 <msg id="PER_NOWRITE">There is no protection on the write to the NV area</msg>
2779 <msg id="FAMILYCOUNT">The family count value does not match</msg>
2780 <msg id="WRITE_LOCKED">The NV area has already been written to</msg>
2781 <msg id="BAD_ATTRIBUTES">The NV area attributes conflict</msg>
2782 <msg id="INVALID_STRUCTURE">The tag and version are invalid or inconsistent</msg>
2783 <msg id="KEY_OWNER_CONTROL">The key evicted by the TPM Owner.</msg>
2784 <msg id="BAD_COUNTER">The counter handle is incorrect</msg>
2785 <msg id="NOT_FULLWRITE">The write is not a complete write of the area</msg>
2786 <msg id="CONTEXT_GAP">The gap between saved context counts is too large</msg>
2787 <msg id="MAXNVWRITES">Max number of NV writes without owner has been exceeded</msg>
2788 <msg id="NOOPERATOR">No operator AuthData value is set</msg>
2789 <msg id="RESOURCEMISSING">The resource pointed to by context is not loaded</msg>
2790 <msg id="DELEGATE_LOCK">The delegate administration is locked</msg>
2791 <msg id="DELEGATE_FAMILY">Attempt to manage a family other then the delegated family</msg>
2792 <msg id="DELEGATE_ADMIN">Delegation table management not enabled</msg>
2793 <msg id="TRANSPORT_NOTEXCLUSIVE">Command executed outside of exclusive transport session</msg>
2794 <msg id="OWNER_CONTROL">Attempt to context save a owner evict controlled key</msg>
2795 <msg id="DAA_RESOURCES">DAA command has no resources available to execute the command</msg>
2796 <msg id="DAA_INPUT_DATA0">The consistency check on DAA parameter inputData0 has failed.</msg>
2797 <msg id="DAA_INPUT_DATA1">The consistency check on DAA parameter inputData1 has failed.</msg>
2798 <msg id="DAA_ISSUER_SETTINGS">The consistency check on DAA_issuerSettings has failed.</msg>
2799 <msg id="DAA_TPM_SETTINGS">The consistency check on DAA_tpmSpecific has failed.</msg>
2800 <msg id="DAA_STAGE">Atomic process indicated by DAA command is not the expected process.</msg>
2801 <msg id="DAA_ISSUER_VALIDITY">Inconsistent issuer validity</msg>
2802 <msg id="DAA_WRONG_W">The consistency check on w has failed.</msg>
2803 <msg id="BAD_HANDLE">The handle is incorrect</msg>
2804 <msg id="BAD_DELEGATE">Delegation is not correct</msg>
2805 <msg id="BADCONTEXT">The context blob is invalid</msg>
2806 <msg id="TOOMANYCONTEXTS">Too many contexts held by the TPM</msg>
2807 <msg id="MA_TICKET_SIGNATURE">Migration authority signature validation failure</msg>
2808 <msg id="MA_DESTINATION">Migration destination not authenticated</msg>
2809 <msg id="MA_SOURCE">Migration source incorrect</msg>
2810 <msg id="MA_AUTHORITY">Incorrect migration authority</msg>
2811 <msg id="PERMANENTEK">Attempt to revoke the EK and the EK is not revocable</msg>
2812 <msg id="BAD_SIGNATURE">Bad signature of CMK ticket</msg>
2813 <msg id="NOCONTEXTSPACE">There is no room in the context list for additional contexts</msg>
2814 <msg id="RETRY">The TPM is too busy to respond to the command immediately</msg>
2815 <msg id="NEEDS_SELFTEST">SelfTestFull has not been run</msg>
2816 <msg id="DOING_SELFTEST">The TPM is currently executing a full selftest</msg>
2817 <msg id="DEFEND_LOCK_RUNNING">TPM is defending against dictionary attacks</msg>
2818 <msg id="NO_MSG"></msg>
2819 <!-- End TPM failure codes -->
2820 </msg_list>
2821 </specification>