Line data Source code
1 4002 : const char *audit_type_to_string(int type) { 2 4002 : switch(type) { 3 2 : case AUDIT_GET: return "GET"; 4 2 : case AUDIT_SET: return "SET"; 5 2 : case AUDIT_LIST: return "LIST"; 6 2 : case AUDIT_ADD: return "ADD"; 7 2 : case AUDIT_DEL: return "DEL"; 8 2 : case AUDIT_USER: return "USER"; 9 2 : case AUDIT_LOGIN: return "LOGIN"; 10 2 : case AUDIT_WATCH_INS: return "WATCH_INS"; 11 2 : case AUDIT_WATCH_REM: return "WATCH_REM"; 12 2 : case AUDIT_WATCH_LIST: return "WATCH_LIST"; 13 2 : case AUDIT_SIGNAL_INFO: return "SIGNAL_INFO"; 14 2 : case AUDIT_ADD_RULE: return "ADD_RULE"; 15 2 : case AUDIT_DEL_RULE: return "DEL_RULE"; 16 2 : case AUDIT_LIST_RULES: return "LIST_RULES"; 17 2 : case AUDIT_TRIM: return "TRIM"; 18 2 : case AUDIT_MAKE_EQUIV: return "MAKE_EQUIV"; 19 2 : case AUDIT_TTY_GET: return "TTY_GET"; 20 2 : case AUDIT_TTY_SET: return "TTY_SET"; 21 2 : case AUDIT_SET_FEATURE: return "SET_FEATURE"; 22 2 : case AUDIT_GET_FEATURE: return "GET_FEATURE"; 23 2 : case AUDIT_USER_AUTH: return "USER_AUTH"; 24 2 : case AUDIT_USER_ACCT: return "USER_ACCT"; 25 2 : case AUDIT_USER_MGMT: return "USER_MGMT"; 26 2 : case AUDIT_CRED_ACQ: return "CRED_ACQ"; 27 2 : case AUDIT_CRED_DISP: return "CRED_DISP"; 28 2 : case AUDIT_USER_START: return "USER_START"; 29 2 : case AUDIT_USER_END: return "USER_END"; 30 2 : case AUDIT_USER_AVC: return "USER_AVC"; 31 2 : case AUDIT_USER_CHAUTHTOK: return "USER_CHAUTHTOK"; 32 2 : case AUDIT_USER_ERR: return "USER_ERR"; 33 2 : case AUDIT_CRED_REFR: return "CRED_REFR"; 34 2 : case AUDIT_USYS_CONFIG: return "USYS_CONFIG"; 35 2 : case AUDIT_USER_LOGIN: return "USER_LOGIN"; 36 2 : case AUDIT_USER_LOGOUT: return "USER_LOGOUT"; 37 2 : case AUDIT_ADD_USER: return "ADD_USER"; 38 2 : case AUDIT_DEL_USER: return "DEL_USER"; 39 2 : case AUDIT_ADD_GROUP: return "ADD_GROUP"; 40 2 : case AUDIT_DEL_GROUP: return "DEL_GROUP"; 41 2 : case AUDIT_DAC_CHECK: return "DAC_CHECK"; 42 2 : case AUDIT_CHGRP_ID: return "CHGRP_ID"; 43 2 : case AUDIT_TEST: return "TEST"; 44 2 : case AUDIT_TRUSTED_APP: return "TRUSTED_APP"; 45 2 : case AUDIT_USER_SELINUX_ERR: return "USER_SELINUX_ERR"; 46 2 : case AUDIT_USER_CMD: return "USER_CMD"; 47 2 : case AUDIT_USER_TTY: return "USER_TTY"; 48 2 : case AUDIT_CHUSER_ID: return "CHUSER_ID"; 49 2 : case AUDIT_GRP_AUTH: return "GRP_AUTH"; 50 2 : case AUDIT_SYSTEM_BOOT: return "SYSTEM_BOOT"; 51 2 : case AUDIT_SYSTEM_SHUTDOWN: return "SYSTEM_SHUTDOWN"; 52 2 : case AUDIT_SYSTEM_RUNLEVEL: return "SYSTEM_RUNLEVEL"; 53 2 : case AUDIT_SERVICE_START: return "SERVICE_START"; 54 2 : case AUDIT_SERVICE_STOP: return "SERVICE_STOP"; 55 2 : case AUDIT_GRP_MGMT: return "GRP_MGMT"; 56 2 : case AUDIT_GRP_CHAUTHTOK: return "GRP_CHAUTHTOK"; 57 2 : case AUDIT_MAC_CHECK: return "MAC_CHECK"; 58 2 : case AUDIT_ACCT_LOCK: return "ACCT_LOCK"; 59 2 : case AUDIT_ACCT_UNLOCK: return "ACCT_UNLOCK"; 60 2 : case AUDIT_USER_DEVICE: return "USER_DEVICE"; 61 2 : case AUDIT_SOFTWARE_UPDATE: return "SOFTWARE_UPDATE"; 62 2 : case AUDIT_DAEMON_START: return "DAEMON_START"; 63 2 : case AUDIT_DAEMON_END: return "DAEMON_END"; 64 2 : case AUDIT_DAEMON_ABORT: return "DAEMON_ABORT"; 65 2 : case AUDIT_DAEMON_CONFIG: return "DAEMON_CONFIG"; 66 2 : case AUDIT_DAEMON_RECONFIG: return "DAEMON_RECONFIG"; 67 2 : case AUDIT_DAEMON_ROTATE: return "DAEMON_ROTATE"; 68 2 : case AUDIT_DAEMON_RESUME: return "DAEMON_RESUME"; 69 2 : case AUDIT_DAEMON_ACCEPT: return "DAEMON_ACCEPT"; 70 2 : case AUDIT_DAEMON_CLOSE: return "DAEMON_CLOSE"; 71 2 : case AUDIT_DAEMON_ERR: return "DAEMON_ERR"; 72 2 : case AUDIT_SYSCALL: return "SYSCALL"; 73 2 : case AUDIT_PATH: return "PATH"; 74 2 : case AUDIT_IPC: return "IPC"; 75 2 : case AUDIT_SOCKETCALL: return "SOCKETCALL"; 76 2 : case AUDIT_CONFIG_CHANGE: return "CONFIG_CHANGE"; 77 2 : case AUDIT_SOCKADDR: return "SOCKADDR"; 78 2 : case AUDIT_CWD: return "CWD"; 79 2 : case AUDIT_EXECVE: return "EXECVE"; 80 2 : case AUDIT_IPC_SET_PERM: return "IPC_SET_PERM"; 81 2 : case AUDIT_MQ_OPEN: return "MQ_OPEN"; 82 2 : case AUDIT_MQ_SENDRECV: return "MQ_SENDRECV"; 83 2 : case AUDIT_MQ_NOTIFY: return "MQ_NOTIFY"; 84 2 : case AUDIT_MQ_GETSETATTR: return "MQ_GETSETATTR"; 85 2 : case AUDIT_KERNEL_OTHER: return "KERNEL_OTHER"; 86 2 : case AUDIT_FD_PAIR: return "FD_PAIR"; 87 2 : case AUDIT_OBJ_PID: return "OBJ_PID"; 88 2 : case AUDIT_TTY: return "TTY"; 89 2 : case AUDIT_EOE: return "EOE"; 90 2 : case AUDIT_BPRM_FCAPS: return "BPRM_FCAPS"; 91 2 : case AUDIT_CAPSET: return "CAPSET"; 92 2 : case AUDIT_MMAP: return "MMAP"; 93 2 : case AUDIT_NETFILTER_PKT: return "NETFILTER_PKT"; 94 2 : case AUDIT_NETFILTER_CFG: return "NETFILTER_CFG"; 95 2 : case AUDIT_SECCOMP: return "SECCOMP"; 96 2 : case AUDIT_PROCTITLE: return "PROCTITLE"; 97 2 : case AUDIT_FEATURE_CHANGE: return "FEATURE_CHANGE"; 98 2 : case AUDIT_REPLACE: return "REPLACE"; 99 2 : case AUDIT_KERN_MODULE: return "KERN_MODULE"; 100 2 : case AUDIT_FANOTIFY: return "FANOTIFY"; 101 2 : case AUDIT_TIME_INJOFFSET: return "TIME_INJOFFSET"; 102 2 : case AUDIT_TIME_ADJNTPVAL: return "TIME_ADJNTPVAL"; 103 2 : case AUDIT_AVC: return "AVC"; 104 2 : case AUDIT_SELINUX_ERR: return "SELINUX_ERR"; 105 2 : case AUDIT_AVC_PATH: return "AVC_PATH"; 106 2 : case AUDIT_MAC_POLICY_LOAD: return "MAC_POLICY_LOAD"; 107 2 : case AUDIT_MAC_STATUS: return "MAC_STATUS"; 108 2 : case AUDIT_MAC_CONFIG_CHANGE: return "MAC_CONFIG_CHANGE"; 109 2 : case AUDIT_MAC_UNLBL_ALLOW: return "MAC_UNLBL_ALLOW"; 110 2 : case AUDIT_MAC_CIPSOV4_ADD: return "MAC_CIPSOV4_ADD"; 111 2 : case AUDIT_MAC_CIPSOV4_DEL: return "MAC_CIPSOV4_DEL"; 112 2 : case AUDIT_MAC_MAP_ADD: return "MAC_MAP_ADD"; 113 2 : case AUDIT_MAC_MAP_DEL: return "MAC_MAP_DEL"; 114 2 : case AUDIT_MAC_IPSEC_ADDSA: return "MAC_IPSEC_ADDSA"; 115 2 : case AUDIT_MAC_IPSEC_DELSA: return "MAC_IPSEC_DELSA"; 116 2 : case AUDIT_MAC_IPSEC_ADDSPD: return "MAC_IPSEC_ADDSPD"; 117 2 : case AUDIT_MAC_IPSEC_DELSPD: return "MAC_IPSEC_DELSPD"; 118 2 : case AUDIT_MAC_IPSEC_EVENT: return "MAC_IPSEC_EVENT"; 119 2 : case AUDIT_MAC_UNLBL_STCADD: return "MAC_UNLBL_STCADD"; 120 2 : case AUDIT_MAC_UNLBL_STCDEL: return "MAC_UNLBL_STCDEL"; 121 2 : case AUDIT_MAC_CALIPSO_ADD: return "MAC_CALIPSO_ADD"; 122 2 : case AUDIT_MAC_CALIPSO_DEL: return "MAC_CALIPSO_DEL"; 123 2 : case AUDIT_AA: return "AA"; 124 2 : case AUDIT_APPARMOR_AUDIT: return "APPARMOR_AUDIT"; 125 2 : case AUDIT_APPARMOR_ALLOWED: return "APPARMOR_ALLOWED"; 126 2 : case AUDIT_APPARMOR_DENIED: return "APPARMOR_DENIED"; 127 2 : case AUDIT_APPARMOR_HINT: return "APPARMOR_HINT"; 128 2 : case AUDIT_APPARMOR_STATUS: return "APPARMOR_STATUS"; 129 2 : case AUDIT_APPARMOR_ERROR: return "APPARMOR_ERROR"; 130 2 : case AUDIT_ANOM_PROMISCUOUS: return "ANOM_PROMISCUOUS"; 131 2 : case AUDIT_ANOM_ABEND: return "ANOM_ABEND"; 132 2 : case AUDIT_ANOM_LINK: return "ANOM_LINK"; 133 2 : case AUDIT_INTEGRITY_DATA: return "INTEGRITY_DATA"; 134 2 : case AUDIT_INTEGRITY_METADATA: return "INTEGRITY_METADATA"; 135 2 : case AUDIT_INTEGRITY_STATUS: return "INTEGRITY_STATUS"; 136 2 : case AUDIT_INTEGRITY_HASH: return "INTEGRITY_HASH"; 137 2 : case AUDIT_INTEGRITY_PCR: return "INTEGRITY_PCR"; 138 2 : case AUDIT_INTEGRITY_RULE: return "INTEGRITY_RULE"; 139 2 : case AUDIT_INTEGRITY_EVM_XATTR: return "INTEGRITY_EVM_XATTR"; 140 2 : case AUDIT_INTEGRITY_POLICY_RULE: return "INTEGRITY_POLICY_RULE"; 141 2 : case AUDIT_KERNEL: return "KERNEL"; 142 0 : case AUDIT_ANOM_LOGIN_FAILURES: return "ANOM_LOGIN_FAILURES"; 143 0 : case AUDIT_ANOM_LOGIN_TIME: return "ANOM_LOGIN_TIME"; 144 0 : case AUDIT_ANOM_LOGIN_SESSIONS: return "ANOM_LOGIN_SESSIONS"; 145 0 : case AUDIT_ANOM_LOGIN_ACCT: return "ANOM_LOGIN_ACCT"; 146 0 : case AUDIT_ANOM_LOGIN_LOCATION: return "ANOM_LOGIN_LOCATION"; 147 0 : case AUDIT_ANOM_MAX_DAC: return "ANOM_MAX_DAC"; 148 0 : case AUDIT_ANOM_MAX_MAC: return "ANOM_MAX_MAC"; 149 0 : case AUDIT_ANOM_AMTU_FAIL: return "ANOM_AMTU_FAIL"; 150 0 : case AUDIT_ANOM_RBAC_FAIL: return "ANOM_RBAC_FAIL"; 151 0 : case AUDIT_ANOM_RBAC_INTEGRITY_FAIL: return "ANOM_RBAC_INTEGRITY_FAIL"; 152 0 : case AUDIT_ANOM_CRYPTO_FAIL: return "ANOM_CRYPTO_FAIL"; 153 0 : case AUDIT_ANOM_ACCESS_FS: return "ANOM_ACCESS_FS"; 154 0 : case AUDIT_ANOM_EXEC: return "ANOM_EXEC"; 155 0 : case AUDIT_ANOM_MK_EXEC: return "ANOM_MK_EXEC"; 156 0 : case AUDIT_ANOM_ADD_ACCT: return "ANOM_ADD_ACCT"; 157 0 : case AUDIT_ANOM_DEL_ACCT: return "ANOM_DEL_ACCT"; 158 0 : case AUDIT_ANOM_MOD_ACCT: return "ANOM_MOD_ACCT"; 159 0 : case AUDIT_ANOM_ROOT_TRANS: return "ANOM_ROOT_TRANS"; 160 0 : case AUDIT_ANOM_LOGIN_SERVICE: return "ANOM_LOGIN_SERVICE"; 161 0 : case AUDIT_RESP_ANOMALY: return "RESP_ANOMALY"; 162 0 : case AUDIT_RESP_ALERT: return "RESP_ALERT"; 163 0 : case AUDIT_RESP_KILL_PROC: return "RESP_KILL_PROC"; 164 0 : case AUDIT_RESP_TERM_ACCESS: return "RESP_TERM_ACCESS"; 165 0 : case AUDIT_RESP_ACCT_REMOTE: return "RESP_ACCT_REMOTE"; 166 0 : case AUDIT_RESP_ACCT_LOCK_TIMED: return "RESP_ACCT_LOCK_TIMED"; 167 0 : case AUDIT_RESP_ACCT_UNLOCK_TIMED: return "RESP_ACCT_UNLOCK_TIMED"; 168 0 : case AUDIT_RESP_ACCT_LOCK: return "RESP_ACCT_LOCK"; 169 0 : case AUDIT_RESP_TERM_LOCK: return "RESP_TERM_LOCK"; 170 0 : case AUDIT_RESP_SEBOOL: return "RESP_SEBOOL"; 171 0 : case AUDIT_RESP_EXEC: return "RESP_EXEC"; 172 0 : case AUDIT_RESP_SINGLE: return "RESP_SINGLE"; 173 0 : case AUDIT_RESP_HALT: return "RESP_HALT"; 174 0 : case AUDIT_RESP_ORIGIN_BLOCK: return "RESP_ORIGIN_BLOCK"; 175 0 : case AUDIT_RESP_ORIGIN_BLOCK_TIMED: return "RESP_ORIGIN_BLOCK_TIMED"; 176 0 : case AUDIT_USER_ROLE_CHANGE: return "USER_ROLE_CHANGE"; 177 0 : case AUDIT_ROLE_ASSIGN: return "ROLE_ASSIGN"; 178 0 : case AUDIT_ROLE_REMOVE: return "ROLE_REMOVE"; 179 0 : case AUDIT_LABEL_OVERRIDE: return "LABEL_OVERRIDE"; 180 0 : case AUDIT_LABEL_LEVEL_CHANGE: return "LABEL_LEVEL_CHANGE"; 181 0 : case AUDIT_USER_LABELED_EXPORT: return "USER_LABELED_EXPORT"; 182 0 : case AUDIT_USER_UNLABELED_EXPORT: return "USER_UNLABELED_EXPORT"; 183 0 : case AUDIT_DEV_ALLOC: return "DEV_ALLOC"; 184 0 : case AUDIT_DEV_DEALLOC: return "DEV_DEALLOC"; 185 0 : case AUDIT_FS_RELABEL: return "FS_RELABEL"; 186 0 : case AUDIT_USER_MAC_POLICY_LOAD: return "USER_MAC_POLICY_LOAD"; 187 0 : case AUDIT_ROLE_MODIFY: return "ROLE_MODIFY"; 188 0 : case AUDIT_USER_MAC_CONFIG_CHANGE: return "USER_MAC_CONFIG_CHANGE"; 189 0 : case AUDIT_CRYPTO_TEST_USER: return "CRYPTO_TEST_USER"; 190 0 : case AUDIT_CRYPTO_PARAM_CHANGE_USER: return "CRYPTO_PARAM_CHANGE_USER"; 191 0 : case AUDIT_CRYPTO_LOGIN: return "CRYPTO_LOGIN"; 192 0 : case AUDIT_CRYPTO_LOGOUT: return "CRYPTO_LOGOUT"; 193 0 : case AUDIT_CRYPTO_KEY_USER: return "CRYPTO_KEY_USER"; 194 0 : case AUDIT_CRYPTO_FAILURE_USER: return "CRYPTO_FAILURE_USER"; 195 0 : case AUDIT_CRYPTO_REPLAY_USER: return "CRYPTO_REPLAY_USER"; 196 0 : case AUDIT_CRYPTO_SESSION: return "CRYPTO_SESSION"; 197 0 : case AUDIT_CRYPTO_IKE_SA: return "CRYPTO_IKE_SA"; 198 0 : case AUDIT_CRYPTO_IPSEC_SA: return "CRYPTO_IPSEC_SA"; 199 0 : case AUDIT_VIRT_CONTROL: return "VIRT_CONTROL"; 200 0 : case AUDIT_VIRT_RESOURCE: return "VIRT_RESOURCE"; 201 0 : case AUDIT_VIRT_MACHINE_ID: return "VIRT_MACHINE_ID"; 202 0 : case AUDIT_VIRT_INTEGRITY_CHECK: return "VIRT_INTEGRITY_CHECK"; 203 0 : case AUDIT_VIRT_CREATE: return "VIRT_CREATE"; 204 0 : case AUDIT_VIRT_DESTROY: return "VIRT_DESTROY"; 205 0 : case AUDIT_VIRT_MIGRATE_IN: return "VIRT_MIGRATE_IN"; 206 0 : case AUDIT_VIRT_MIGRATE_OUT: return "VIRT_MIGRATE_OUT"; 207 0 : case AUDIT_MESSAGE_TEXT_MAX: return "MESSAGE_TEXT_MAX"; 208 3724 : default: return NULL; 209 : } 210 : } 211 :