usr/src/lib/libbsm/adt_record.dtd.1

   1 <?xml version="1.0" encoding="UTF-8" ?>
   2
   3 <!--
   4  Copyright 2010 Sun Microsystems, Inc.  All rights reserved.
   5  Use is subject to license terms.
   6
   7  CDDL HEADER START
   8
   9  The contents of this file are subject to the terms of the
  10  Common Development and Distribution License (the "License").
  11  You may not use this file except in compliance with the License.
  12
  13  You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
  14  or http://www.opensolaris.org/os/licensing.
  15  See the License for the specific language governing permissions
  16  and limitations under the License.
  17
  18  When distributing Covered Code, include this CDDL HEADER in each
  19  file and include the License file at usr/src/OPENSOLARIS.LICENSE.
  20  If applicable, add the following below this CDDL HEADER, with the
  21  fields enclosed by brackets "[]" replaced with your own identifying
  22  information: Portions Copyright [yyyy] [name of copyright owner]
  23
  24  CDDL HEADER END
  25 -->
  26
  27
  28 <!--Entity Definitions-->
  29
  30 <!-- timeattr or iso8601
  31
  32 timeattr:
  33         the time/date to the second in strftime(3C) default format,
  34         followed by milliseconds offset.
  35
  36         Example:        time="Mon May 06 12:10:18 2002" msec="750"
  37
  38 iso8601:
  39         ISO 8601 standard format date time and timezone;
  40         YYYY-MM-DD HH:MM:SS.sss +/-HH:MM; year, month, day 24 hour time with
  41         milliseconds + or - offset from Universal Time (UTC, aka GMT)
  42
  43         Example:        iso8601="2003-09-17 16:47:41.831 -07:00"
  44
  45 -->
  46 <!ENTITY % timeattr     "time           CDATA #IMPLIED
  47                         msec            CDATA #IMPLIED">
  48
  49 <!ENTITY % iso8601      "iso8601        CDATA #IMPLIED">
  50
  51 <!-- xinfo      Generic info for X related tokens.  -->
  52 <!ENTITY % xinfo        "xid            CDATA #REQUIRED
  53                         xcreator-uid    CDATA #REQUIRED">
  54
  55 <!-- reserved_toks
  56
  57 This represents the set of "reserved" tokens whose placement is
  58 fixed.
  59
  60 -->
  61 <!ENTITY % reserved_toks        "(
  62                         file                    |
  63                         record                  |
  64                         host                    |
  65                         sequence
  66                         )
  67 ">
  68
  69 <!-- normaltoks
  70
  71 This represents the set of all tokens other than the "reserved"
  72 tokens.
  73
  74 -->
  75 <!ENTITY % normaltoks   "(
  76                         acl                     |
  77                         arbitrary               |
  78                         argument                |
  79                         attribute               |
  80                         cmd                     |
  81                         exit                    |
  82                         exec_args               |
  83                         exec_env                |
  84                         fmri                    |
  85                         group                   |
  86                         ip                      |
  87                         ip_address              |
  88                         IPC                     |
  89                         IPC_perm                |
  90                         ip_port                 |
  91                         liaison                 |
  92                         opaque                  |
  93                         path                    |
  94                         path_attr               |
  95                         privilege               |
  96                         process                 |
  97                         return                  |
  98                         old_socket              |
  99                         socket                  |
 100                         subject                 |
 101                         text                    |
 102                         user                    |
 103                         use_of_authorization    |
 104                         use_of_privilege        |
 105                         X_atom                  |
 106                         X_client                |
 107                         X_color_map             |
 108                         X_cursor                |
 109                         X_font                  |
 110                         X_graphic_context       |
 111                         X_pixmap                |
 112                         X_property              |
 113                         X_selection             |
 114                         X_window                |
 115                         zone
 116                         )
 117 ">
 118
 119 <!--Element Definitions-->
 120
 121 <!--
 122
 123 The main element, "audit", consists of a sequence of file & record tokens.
 124
 125 -->
 126 <!ELEMENT audit (file | record)*>
 127
 128 <!-- file token -->
 129 <!ELEMENT file          (#PCDATA)>
 130 <!ATTLIST file          %iso8601;>
 131
 132
 133 <!-- record token
 134
 135 Audit records will have this general layout of tokens after the
 136 first token (which is the record token):
 137         (tokens),subject,group,(tokens),return,sequence,host
 138
 139 (all tokens after the record token are optional; the host token is unused.)
 140
 141 -->
 142 <!ELEMENT record (
 143                 (%normaltoks;)*,
 144                 sequence?,
 145                 host?
 146         )
 147 >
 148 <!ATTLIST record
 149                 version         CDATA #REQUIRED
 150                 event           CDATA #REQUIRED
 151                 modifier        CDATA #IMPLIED
 152                 host            CDATA #IMPLIED
 153                 %iso8601;
 154 >
 155
 156 <!-- text token -->
 157 <!ELEMENT text          (#PCDATA)>
 158
 159 <!-- user token -->
 160 <!ELEMENT user  EMPTY>
 161 <!ATTLIST user
 162                 uid             CDATA #REQUIRED
 163                 username        CDATA #REQUIRED
 164 >
 165
 166 <!-- path token -->
 167 <!ELEMENT path          (#PCDATA)>
 168
 169 <!-- path_attr token -->
 170 <!ELEMENT path_attr             (xattr*)>
 171 <!ELEMENT xattr                 (#PCDATA)>
 172
 173 <!-- host token -->
 174 <!ELEMENT host          (#PCDATA)>
 175
 176 <!-- subject token -->
 177 <!ELEMENT subject       EMPTY>
 178 <!ATTLIST subject
 179                 audit-uid       CDATA #REQUIRED
 180                 uid             CDATA #REQUIRED
 181                 gid             CDATA #REQUIRED
 182                 ruid            CDATA #REQUIRED
 183                 rgid            CDATA #REQUIRED
 184                 pid             CDATA #REQUIRED
 185                 sid             CDATA #REQUIRED
 186                 tid             CDATA #REQUIRED
 187 >
 188
 189 <!-- process token -->
 190 <!ELEMENT process       EMPTY>
 191 <!ATTLIST process
 192                 audit-uid       CDATA #REQUIRED
 193                 uid             CDATA #REQUIRED
 194                 gid             CDATA #REQUIRED
 195                 ruid            CDATA #REQUIRED
 196                 rgid            CDATA #REQUIRED
 197                 pid             CDATA #REQUIRED
 198                 sid             CDATA #REQUIRED
 199                 tid             CDATA #REQUIRED
 200 >
 201
 202 <!-- return token -->
 203 <!ELEMENT return                EMPTY>
 204 <!ATTLIST return
 205                 errval          CDATA #REQUIRED
 206                 retval          CDATA #REQUIRED
 207 >
 208
 209 <!-- exit token -->
 210 <!ELEMENT exit                  EMPTY>
 211 <!ATTLIST exit
 212                 errval          CDATA #REQUIRED
 213                 retval          CDATA #REQUIRED
 214 >
 215
 216 <!-- sequence token -->
 217 <!ELEMENT sequence              EMPTY>
 218 <!ATTLIST sequence
 219                 seq-num         CDATA #REQUIRED
 220 >
 221
 222 <!-- fmri token -->
 223 <!ELEMENT fmri                  (#PCDATA)>
 224
 225 <!-- group token -->
 226 <!ELEMENT group                 (gid)*>
 227 <!ELEMENT gid                   (#PCDATA)>
 228
 229 <!-- opaque token -->
 230 <!ELEMENT opaque                (#PCDATA)>
 231
 232 <!-- liaison token -->
 233 <!-- (NOTE: liaison is obsolete and is no longer generated -->
 234 <!ELEMENT liaison               (#PCDATA)>
 235
 236 <!-- argument token -->
 237 <!ELEMENT argument              EMPTY>
 238 <!ATTLIST argument
 239                 arg-num         CDATA #REQUIRED
 240                 value           CDATA #REQUIRED
 241                 desc            CDATA #REQUIRED
 242 >
 243
 244 <!-- attribute token -->
 245 <!ELEMENT attribute             EMPTY>
 246 <!ATTLIST attribute
 247                 mode            CDATA #REQUIRED
 248                 uid             CDATA #REQUIRED
 249                 gid             CDATA #REQUIRED
 250                 fsid            CDATA #REQUIRED
 251                 nodeid          CDATA #REQUIRED
 252                 device          CDATA #REQUIRED
 253 >
 254
 255 <!-- cmd token -->
 256 <!ELEMENT cmd                   (argv*, arge*)>
 257 <!ELEMENT argv                  (#PCDATA)>
 258 <!ELEMENT arge                  (#PCDATA)>
 259
 260 <!-- exec_args token -->
 261 <!ELEMENT exec_args             (arg*)>
 262 <!ELEMENT arg                   (#PCDATA)>
 263
 264 <!-- exec_env token -->
 265 <!ELEMENT exec_env              (env*)>
 266 <!ELEMENT env                   (#PCDATA)>
 267
 268 <!-- arbitrary token -->
 269 <!ELEMENT arbitrary             (#PCDATA)>
 270 <!ATTLIST arbitrary
 271                 print           CDATA #REQUIRED
 272                 type            CDATA #REQUIRED
 273                 count           CDATA #REQUIRED
 274 >
 275
 276 <!-- privilege token -->
 277 <!ELEMENT privilege             (#PCDATA)>
 278 <!ATTLIST privilege
 279                 set-type        CDATA #REQUIRED
 280 >
 281
 282 <!-- secflags token -->
 283 <!ELEMENT secflags              (#PCDATA)>
 284 <!ATTLIST secflags
 285                 set-type        CDATA #REQUIRED
 286 >
 287
 288
 289 <!-- use_of_privilege token -->
 290 <!ELEMENT use_of_privilege      (#PCDATA)>
 291 <!ATTLIST use_of_privilege
 292                 result          CDATA #REQUIRED
 293 >
 294
 295 <!-- use_of_authorization token -->
 296 <!ELEMENT use_of_authorization  (#PCDATA)>
 297
 298 <!-- IPC token -->
 299 <!ELEMENT IPC                   EMPTY>
 300 <!ATTLIST IPC
 301                 ipc-type        CDATA #REQUIRED
 302                 ipc-id          CDATA #REQUIRED
 303 >
 304
 305 <!-- IPC_perm token -->
 306 <!ELEMENT IPC_perm              EMPTY>
 307 <!ATTLIST IPC_perm
 308                 uid             CDATA #REQUIRED
 309                 gid             CDATA #REQUIRED
 310                 creator-uid     CDATA #REQUIRED
 311                 creator-gid     CDATA #REQUIRED
 312                 mode            CDATA #REQUIRED
 313                 seq             CDATA #REQUIRED
 314                 key             CDATA #REQUIRED
 315 >
 316
 317 <!-- ip_address token -->
 318 <!ELEMENT ip_address            (#PCDATA)>
 319
 320 <!-- ip_port token -->
 321 <!-- (NOTE: ip_port is obsolete and is no longer generated -->
 322 <!ELEMENT ip_port               (#PCDATA)>
 323
 324 <!-- ip token -->
 325 <!-- (NOTE: ip is obsolete and is no longer generated -->
 326 <!ELEMENT ip                    EMPTY>
 327 <!ATTLIST ip
 328                 version         CDATA #REQUIRED
 329                 service_type    CDATA #REQUIRED
 330                 len             CDATA #REQUIRED
 331                 id              CDATA #REQUIRED
 332                 offset          CDATA #REQUIRED
 333                 time_to_live    CDATA #REQUIRED
 334                 protocol        CDATA #REQUIRED
 335                 cksum           CDATA #REQUIRED
 336                 src_addr        CDATA #REQUIRED
 337                 dest_addr       CDATA #REQUIRED
 338 >
 339
 340 <!-- old_socket token -->
 341 <!ELEMENT old_socket            EMPTY>
 342 <!ATTLIST old_socket
 343                 type            CDATA #REQUIRED
 344                 port            CDATA #REQUIRED
 345                 addr            CDATA #REQUIRED
 346 >
 347
 348 <!-- socket token -->
 349 <!ELEMENT socket                EMPTY>
 350 <!ATTLIST socket
 351                 sock_domain     CDATA #REQUIRED
 352                 sock_type       CDATA #REQUIRED
 353                 lport           CDATA #REQUIRED
 354                 laddr           CDATA #REQUIRED
 355                 fport           CDATA #REQUIRED
 356                 faddr           CDATA #REQUIRED
 357 >
 358
 359 <!-- acl token -->
 360 <!ELEMENT acl                   EMPTY>
 361 <!ATTLIST acl
 362                 type            CDATA #IMPLIED
 363                 value           CDATA #IMPLIED
 364                 mode            CDATA #IMPLIED
 365                 flags           CDATA #IMPLIED
 366                 id              CDATA #IMPLIED
 367                 access_mask     CDATA #IMPLIED
 368 >
 369
 370 <!-- tid token -->
 371 <!-- future intent: contain one of ipadr | MTUadr | device -->
 372 <!ELEMENT tid                   (ipadr*)>
 373 <!ATTLIST tid
 374                 type            CDATA #REQUIRED
 375 >
 376
 377 <!-- ipadr content of tid token -->
 378 <!ELEMENT ipadr                 EMPTY>
 379 <!ATTLIST ipadr
 380                 local-port      CDATA #REQUIRED
 381                 remote-port     CDATA #REQUIRED
 382                 host            CDATA #REQUIRED
 383 >
 384
 385 <!-- X_atom token -->
 386 <!ELEMENT X_atom                (#PCDATA)>
 387
 388 <!-- X_color_map token -->
 389 <!ELEMENT X_color_map           EMPTY>
 390 <!ATTLIST X_color_map           %xinfo;>
 391
 392 <!-- X_cursor token -->
 393 <!ELEMENT X_cursor              EMPTY>
 394 <!ATTLIST X_cursor              %xinfo;>
 395
 396 <!-- X_font token -->
 397 <!ELEMENT X_font                EMPTY>
 398 <!ATTLIST X_font                %xinfo;>
 399
 400 <!-- X_graphic_context token -->
 401 <!ELEMENT X_graphic_context     EMPTY>
 402 <!ATTLIST X_graphic_context     %xinfo;>
 403
 404 <!-- X_pixmap token -->
 405 <!ELEMENT X_pixmap              EMPTY>
 406 <!ATTLIST X_pixmap              %xinfo;>
 407
 408 <!-- X_window token -->
 409 <!ELEMENT X_window              EMPTY>
 410 <!ATTLIST X_window              %xinfo;>
 411
 412 <!-- X_property token -->
 413 <!ELEMENT X_property            (#PCDATA)>
 414 <!ATTLIST X_property            %xinfo;>
 415
 416 <!-- X_client token -->
 417 <!ELEMENT X_client              (#PCDATA)>
 418
 419 <!-- X_selection token -->
 420 <!ELEMENT X_selection           (xsel_text, xsel_type, xsel_data)>
 421 <!ELEMENT x_sel_text            (#PCDATA)>
 422 <!ELEMENT x_sel_type            (#PCDATA)>
 423 <!ELEMENT x_sel_data            (#PCDATA)>
 424
 425 <!-- zonename token -->
 426 <!ELEMENT zone                  EMPTY>
 427 <!ATTLIST zone
 428                 name            CDATA #REQUIRED
 429 >