| Current File : //usr/share/lib/xml/dtd/adt_record.dtd.1 |
<?xml version="1.0" encoding="UTF-8" ?>
<!--
Copyright (c) 2002, 2013, Oracle and/or its affiliates. All rights reserved.
-->
<!--Entity Definitions-->
<!-- timeattr or iso8601
timeattr:
the time/date to the second in strftime(3C) default format,
followed by milliseconds offset.
Example: time="Mon May 06 12:10:18 2002" msec="750"
iso8601:
ISO 8601 standard format date time and timezone;
YYYY-MM-DD HH:MM:SS.sss +/-HH:MM; year, month, day 24 hour time with
milliseconds + or - offset from Universal Time (UTC, aka GMT)
Example: iso8601="2003-09-17 16:47:41.831 -07:00"
-->
<!ENTITY % timeattr "time CDATA #IMPLIED
msec CDATA #IMPLIED">
<!ENTITY % iso8601 "iso8601 CDATA #IMPLIED">
<!-- xinfo Generic info for X related tokens. -->
<!ENTITY % xinfo "xid CDATA #REQUIRED
xcreator-uid CDATA #REQUIRED">
<!-- reserved_toks
This represents the set of "reserved" tokens whose placement is
fixed.
-->
<!ENTITY % reserved_toks "(
file |
record |
host |
sequence
)
">
<!-- normaltoks
This represents the set of all tokens other than the "reserved"
tokens.
-->
<!ENTITY % normaltoks "(
acl |
arbitrary |
argument |
attribute |
cmd |
exit |
exec_args |
exec_env |
fmri |
group |
groups |
ip |
ip_address |
IPC |
IPC_perm |
ip_port |
liaison |
opaque |
path |
path_attr |
privilege |
process |
return |
sensitivity_label |
old_socket |
socket |
subject |
text |
user |
use_of_authorization |
use_of_privilege |
X_atom |
X_client |
X_color_map |
X_cursor |
X_font |
X_graphic_context |
X_pixmap |
X_property |
X_selection |
X_window |
zone
)
">
<!--Element Definitions-->
<!--
The main element, "audit", consists of a sequence of file & record tokens.
-->
<!ELEMENT audit (file | record)*>
<!-- file token -->
<!ELEMENT file (#PCDATA)>
<!ATTLIST file %iso8601;>
<!-- record token
Audit records will have this general layout of tokens after the
first token (which is the record token):
(tokens),subject,groups,(tokens),return,sequence,host
(all tokens after the record token are optional; the host token is unused.)
-->
<!ELEMENT record (
(%normaltoks;)*,
sequence?,
host?
)
>
<!ATTLIST record
version CDATA #REQUIRED
event CDATA #REQUIRED
modifier CDATA #IMPLIED
host CDATA #IMPLIED
%iso8601;
>
<!-- text token -->
<!ELEMENT text (#PCDATA)>
<!-- user token -->
<!ELEMENT user EMPTY>
<!ATTLIST user
uid CDATA #REQUIRED
username CDATA #REQUIRED
>
<!-- group token -->
<!ELEMENT group EMPTY>
<!ATTLIST group
gid CDATA #REQUIRED
groupname CDATA #REQUIRED
>
<!-- path token -->
<!ELEMENT path (#PCDATA)>
<!-- path_attr token -->
<!ELEMENT path_attr (xattr*)>
<!ELEMENT xattr (#PCDATA)>
<!-- host token -->
<!ELEMENT host (#PCDATA)>
<!-- subject token -->
<!ELEMENT subject EMPTY>
<!ATTLIST subject
audit-uid CDATA #REQUIRED
uid CDATA #REQUIRED
gid CDATA #REQUIRED
ruid CDATA #REQUIRED
rgid CDATA #REQUIRED
pid CDATA #REQUIRED
sid CDATA #REQUIRED
tid CDATA #REQUIRED
>
<!-- process token -->
<!ELEMENT process EMPTY>
<!ATTLIST process
audit-uid CDATA #REQUIRED
uid CDATA #REQUIRED
gid CDATA #REQUIRED
ruid CDATA #REQUIRED
rgid CDATA #REQUIRED
pid CDATA #REQUIRED
sid CDATA #REQUIRED
tid CDATA #REQUIRED
>
<!-- return token -->
<!ELEMENT return EMPTY>
<!ATTLIST return
errval CDATA #REQUIRED
retval CDATA #REQUIRED
>
<!-- exit token -->
<!ELEMENT exit EMPTY>
<!ATTLIST exit
errval CDATA #REQUIRED
retval CDATA #REQUIRED
>
<!-- sequence token -->
<!ELEMENT sequence EMPTY>
<!ATTLIST sequence
seq-num CDATA #REQUIRED
>
<!-- fmri token -->
<!ELEMENT fmri (#PCDATA)>
<!-- groups token -->
<!ELEMENT groups (gid)*>
<!ELEMENT gid (#PCDATA)>
<!-- opaque token -->
<!ELEMENT opaque (#PCDATA)>
<!-- liaison token -->
<!-- (NOTE: liaison is obsolete and is no longer generated -->
<!ELEMENT liaison (#PCDATA)>
<!-- argument token -->
<!ELEMENT argument EMPTY>
<!ATTLIST argument
arg-num CDATA #REQUIRED
value CDATA #REQUIRED
desc CDATA #REQUIRED
>
<!-- attribute token -->
<!ELEMENT attribute EMPTY>
<!ATTLIST attribute
mode CDATA #REQUIRED
uid CDATA #REQUIRED
gid CDATA #REQUIRED
fsid CDATA #REQUIRED
nodeid CDATA #REQUIRED
device CDATA #REQUIRED
>
<!-- cmd token -->
<!ELEMENT cmd (argv*, arge*)>
<!ELEMENT argv (#PCDATA)>
<!ELEMENT arge (#PCDATA)>
<!-- exec_args token -->
<!ELEMENT exec_args (arg*)>
<!ELEMENT arg (#PCDATA)>
<!-- exec_env token -->
<!ELEMENT exec_env (env*)>
<!ELEMENT env (#PCDATA)>
<!-- arbitrary token -->
<!ELEMENT arbitrary (#PCDATA)>
<!ATTLIST arbitrary
print CDATA #REQUIRED
type CDATA #REQUIRED
count CDATA #REQUIRED
>
<!-- privilege token -->
<!ELEMENT privilege (#PCDATA)>
<!ATTLIST privilege
set-type CDATA #REQUIRED
>
<!-- use_of_privilege token -->
<!ELEMENT use_of_privilege (#PCDATA)>
<!ATTLIST use_of_privilege
result CDATA #REQUIRED
>
<!-- sensitivity_label token -->
<!ELEMENT sensitivity_label (#PCDATA)>
<!-- use_of_authorization token -->
<!ELEMENT use_of_authorization (#PCDATA)>
<!-- IPC token -->
<!ELEMENT IPC EMPTY>
<!ATTLIST IPC
ipc-type CDATA #REQUIRED
ipc-id CDATA #REQUIRED
>
<!-- IPC_perm token -->
<!ELEMENT IPC_perm EMPTY>
<!ATTLIST IPC_perm
uid CDATA #REQUIRED
gid CDATA #REQUIRED
creator-uid CDATA #REQUIRED
creator-gid CDATA #REQUIRED
mode CDATA #REQUIRED
seq CDATA #REQUIRED
key CDATA #REQUIRED
>
<!-- ip_address token -->
<!ELEMENT ip_address (#PCDATA)>
<!-- ip_port token -->
<!-- (NOTE: ip_port is obsolete and is no longer generated -->
<!ELEMENT ip_port (#PCDATA)>
<!-- ip token -->
<!-- (NOTE: ip is obsolete and is no longer generated -->
<!ELEMENT ip EMPTY>
<!ATTLIST ip
version CDATA #REQUIRED
service_type CDATA #REQUIRED
len CDATA #REQUIRED
id CDATA #REQUIRED
offset CDATA #REQUIRED
time_to_live CDATA #REQUIRED
protocol CDATA #REQUIRED
cksum CDATA #REQUIRED
src_addr CDATA #REQUIRED
dest_addr CDATA #REQUIRED
>
<!-- old_socket token -->
<!ELEMENT old_socket EMPTY>
<!ATTLIST old_socket
type CDATA #REQUIRED
port CDATA #REQUIRED
addr CDATA #REQUIRED
>
<!-- socket token -->
<!ELEMENT socket EMPTY>
<!ATTLIST socket
sock_domain CDATA #REQUIRED
sock_type CDATA #REQUIRED
lport CDATA #REQUIRED
laddr CDATA #REQUIRED
fport CDATA #REQUIRED
faddr CDATA #REQUIRED
>
<!-- acl token -->
<!ELEMENT acl EMPTY>
<!ATTLIST acl
type CDATA #IMPLIED
value CDATA #IMPLIED
mode CDATA #IMPLIED
flags CDATA #IMPLIED
id CDATA #IMPLIED
access_mask CDATA #IMPLIED
>
<!-- tid token -->
<!-- future intent: contain one of ipadr | MTUadr | device -->
<!ELEMENT tid (ipadr*)>
<!ATTLIST tid
type CDATA #REQUIRED
>
<!-- ipadr content of tid token -->
<!ELEMENT ipadr EMPTY>
<!ATTLIST ipadr
local-port CDATA #REQUIRED
remote-port CDATA #REQUIRED
host CDATA #REQUIRED
>
<!-- X_atom token -->
<!ELEMENT X_atom (#PCDATA)>
<!-- X_color_map token -->
<!ELEMENT X_color_map EMPTY>
<!ATTLIST X_color_map %xinfo;>
<!-- X_cursor token -->
<!ELEMENT X_cursor EMPTY>
<!ATTLIST X_cursor %xinfo;>
<!-- X_font token -->
<!ELEMENT X_font EMPTY>
<!ATTLIST X_font %xinfo;>
<!-- X_graphic_context token -->
<!ELEMENT X_graphic_context EMPTY>
<!ATTLIST X_graphic_context %xinfo;>
<!-- X_pixmap token -->
<!ELEMENT X_pixmap EMPTY>
<!ATTLIST X_pixmap %xinfo;>
<!-- X_window token -->
<!ELEMENT X_window EMPTY>
<!ATTLIST X_window %xinfo;>
<!-- X_property token -->
<!ELEMENT X_property (#PCDATA)>
<!ATTLIST X_property %xinfo;>
<!-- X_client token -->
<!ELEMENT X_client (#PCDATA)>
<!-- X_selection token -->
<!ELEMENT X_selection (xsel_text, xsel_type, xsel_data)>
<!ELEMENT x_sel_text (#PCDATA)>
<!ELEMENT x_sel_type (#PCDATA)>
<!ELEMENT x_sel_data (#PCDATA)>
<!-- zonename token -->
<!ELEMENT zone EMPTY>
<!ATTLIST zone
name CDATA #REQUIRED
>