11 AUDIT_SIGNAL_INFO 1010
19 AUDIT_SET_FEATURE 1018
20 AUDIT_GET_FEATURE 1019
22 AUDIT_FIRST_USER_MSG 1100
25 AUDIT_LAST_USER_MSG 1199
27 AUDIT_DAEMON_START 1200
29 AUDIT_DAEMON_ABORT 1202
30 AUDIT_DAEMON_CONFIG 1203
37 AUDIT_CONFIG_CHANGE 1305
41 AUDIT_IPC_SET_PERM 1311
43 AUDIT_MQ_SENDRECV 1313
45 AUDIT_MQ_GETSETATTR 1315
46 AUDIT_KERNEL_OTHER 1316
54 AUDIT_NETFILTER_PKT 1324
55 AUDIT_NETFILTER_CFG 1325
59 #ifndef STRACE_WORKAROUND_FOR_AUDIT_FEATURE_CHANGE
60 # define STRACE_WORKAROUND_FOR_AUDIT_FEATURE_CHANGE
62 * Linux kernel commit v3.15-rc1~18^2~1 has changed the value
63 * of AUDIT_FEATURE_CHANGE constant introduced by commit v3.13-rc1~19^2~20
64 * which is of course an ABI breakage that affected 3.13 and 3.14 kernel
65 * releases as well as their LTS derivatives.
66 * Linux kernel commit v3.15-rc1~18^2~1 also claims that the old value
67 * of AUDIT_FEATURE_CHANGE was ignored by userspace because of the established
68 * convention how netlink messages for the audit system are divided into blocks.
69 * Looks like the best way to handle this situation is to pretend that
70 * the old value of AUDIT_FEATURE_CHANGE didn't exist.
72 # undef AUDIT_FEATURE_CHANGE
74 AUDIT_FEATURE_CHANGE 1328
77 AUDIT_KERN_MODULE 1330
80 AUDIT_SELINUX_ERR 1401
82 AUDIT_MAC_POLICY_LOAD 1403
84 AUDIT_MAC_CONFIG_CHANGE 1405
85 AUDIT_MAC_UNLBL_ALLOW 1406
86 AUDIT_MAC_CIPSOV4_ADD 1407
87 AUDIT_MAC_CIPSOV4_DEL 1408
88 AUDIT_MAC_MAP_ADD 1409
89 AUDIT_MAC_MAP_DEL 1410
90 AUDIT_MAC_IPSEC_ADDSA 1411
91 AUDIT_MAC_IPSEC_DELSA 1412
92 AUDIT_MAC_IPSEC_ADDSPD 1413
93 AUDIT_MAC_IPSEC_DELSPD 1414
94 AUDIT_MAC_IPSEC_EVENT 1415
95 AUDIT_MAC_UNLBL_STCADD 1416
96 AUDIT_MAC_UNLBL_STCDEL 1417
97 AUDIT_MAC_CALIPSO_ADD 1418
98 AUDIT_MAC_CALIPSO_DEL 1419
100 AUDIT_ANOM_PROMISCUOUS 1700
101 AUDIT_ANOM_ABEND 1701
103 AUDIT_LAST_KERN_ANOM_MSG 1799
105 AUDIT_INTEGRITY_DATA 1800
106 AUDIT_INTEGRITY_METADATA 1801
107 AUDIT_INTEGRITY_STATUS 1802
108 AUDIT_INTEGRITY_HASH 1803
109 AUDIT_INTEGRITY_PCR 1804
110 AUDIT_INTEGRITY_RULE 1805
111 AUDIT_INTEGRITY_EVM_XATTR 1806
115 AUDIT_FIRST_USER_MSG2 2100
116 AUDIT_LAST_USER_MSG2 2999