search for: audit_class

...e is security-sensible, not new process itself) and occurred too often and create noise. connect()/accept() from "nt", but not setsockopt(), for the same reasons. And so on. How should I create new system class? What need to be putted into "classmask" in audit_class(5)? How should I edit audit_event(5) file, as it seems, that one event could belong only to one class, and I don't want to remove these events from their natural classes. -- // Black Lion AKA Lev Serebryakov <lev@FreeBSD.org>

...onfig/config.guess U src/contrib/openbsm/config/config.h.in U src/contrib/openbsm/config/config.sub U src/contrib/openbsm/config/depcomp U src/contrib/openbsm/config/install-sh U src/contrib/openbsm/config/ltmain.sh U src/contrib/openbsm/config/missing U src/contrib/openbsm/etc/audit_class U src/contrib/openbsm/etc/audit_control U src/contrib/openbsm/etc/audit_event N src/contrib/openbsm/etc/audit_filter U src/contrib/openbsm/etc/audit_user U src/contrib/openbsm/etc/audit_warn U src/contrib/openbsm/libbsm/Makefile.am U src/contrib/openbsm/libbsm/Makefile.in U...

...ead/zone.h update: usr/src/lib/Makefile update: usr/src/lib/auditd_plugins/syslog/systoken.c update: usr/src/lib/auditd_plugins/syslog/systoken.h update: usr/src/lib/common/inc/c_synonyms.h update: usr/src/lib/libbsm/Makefile update: usr/src/lib/libbsm/Makefile.com update: usr/src/lib/libbsm/audit_class.txt update: usr/src/lib/libbsm/audit_event.txt update: usr/src/lib/libbsm/common/adt_token.c update: usr/src/lib/libbsm/common/au_to.c update: usr/src/lib/libbsm/common/audit_allocate.c update: usr/src/lib/libbsm/common/audit_ftpd.c update: usr/src/lib/libbsm/common/audit_rexd.c update: usr/...