diff options
Diffstat (limited to 'pki/base/tps/src/include/engine/audit.h')
-rw-r--r-- | pki/base/tps/src/include/engine/audit.h | 90 |
1 files changed, 0 insertions, 90 deletions
diff --git a/pki/base/tps/src/include/engine/audit.h b/pki/base/tps/src/include/engine/audit.h deleted file mode 100644 index f8b50de37..000000000 --- a/pki/base/tps/src/include/engine/audit.h +++ /dev/null @@ -1,90 +0,0 @@ -/* --- BEGIN COPYRIGHT BLOCK --- - * This library is free software; you can redistribute it and/or - * modify it under the terms of the GNU Lesser General Public - * License as published by the Free Software Foundation; - * version 2.1 of the License. - * - * This library is distributed in the hope that it will be useful, - * but WITHOUT ANY WARRANTY; without even the implied warranty of - * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU - * Lesser General Public License for more details. - * - * You should have received a copy of the GNU Lesser General Public - * License along with this library; if not, write to the Free Software - * Foundation, Inc., 51 Franklin Street, Fifth Floor, - * Boston, MA 02110-1301 USA - * - * Copyright (C) 2009 Red Hat, Inc. - * All rights reserved. - * --- END COPYRIGHT BLOCK --- - */ - -#ifndef AUDIT_H -#define AUDIT_H - -#define AUDIT_SIG_MSG_FORMAT "[%s] %x [AuditEvent=%s][SubjectID=%s][Outcome=%s] signature of audit buffer just flushed: sig: %s" -#define AUDIT_MSG_FORMAT "[SubjectID=%s][Outcome=%s] %s" - -// for EV_ROLE_ASSUME -#define AUDIT_MSG_ROLE "[SubjectID=%s][Role=%s][Outcome=%s] %s" - -// for EV_CONFIG, EV_CONFIG_ROLE, EV_CONFIG_TOKEN, EV_CONFIG_PROFILE, EV_CONFIG_AUDIT -/* - ParamNameValPairs must be a name;;value pair - (where name and value are separated by the delimiter ;;) - separated by + (if more than one name;;value pair) of config params changed - Object which identifies the object being modified has the same format name;;value eg. tokenid;;12345 -*/ -#define AUDIT_MSG_CONFIG "[SubjectID=%s][Role=%s][Outcome=%s][Object=%s][ParamNameValPairs=%s] %s" - -// for EV_APPLET_UPGRADE; note: "op" is operation such as "format," "enrollment" -#define AUDIT_MSG_APPLET_UPGRADE "[SubjectID=%s][CUID=%s][MSN=%s][Outcome=%s][op=%s][KeyVersion=%s][OldAppletVersion=%s][NewAppletVersion=%s] %s" - -// for EV_KEY_CHANGEOVER; note: "op" is operation such as "format," "enrollment," "pinReset," "renewal" -#define AUDIT_MSG_KEY_CHANGEOVER "[SubjectID=%s][CUID=%s][MSN=%s][Outcome=%s][op=%s][AppletVersion=%s][OldKeyVersion=%s][NewKeyVersion=%s] %s" - -// for EV_AUTH_SUCCESS and EV_AUTH_FAIL -#define AUDIT_MSG_AUTH "[SubjectID=%s][AuthID=%s][Outcome=%s] %s" - -// for EV_AUTHZ_SUCCESS and EV_AUTHZ_FAIL -#define AUDIT_MSG_AUTHZ "[SubjectID=%s][op=%s][Outcome=%s] %s" - -// for op's EV_FORMAT, EV_ENROLLMENT, EV_PIN_RESET, EV_RENEWAL -#define AUDIT_MSG_PROC "[SubjectID=%s][CUID=%s][MSN=%s][Outcome=%s][op=%s][AppletVersion=%s][KeyVersion=%s] %s" - -// for op's EV_ENROLLMENT and EV_RENEWAL. -#define AUDIT_MSG_PROC_CERT_REQ "[SubjectID=%s][CUID=%s][MSN=%s][Outcome=%s][op=%s][AppletVersion=%s][KeyVersion=%s][Serial=%s][CA_ID=%s] %s" - -// op is either "revoke" or "unrevoke" -#define AUDIT_MSG_CERT_STATUS_CHANGE "[SubjectID=%s][Outcome=%s][op=%s][Serial=%s][CA_ID=%s] %s" - -/* - * Audit events definitions - */ -#define EV_AUDIT_LOG_STARTUP "AUDIT_LOG_STARTUP" -#define EV_AUDIT_LOG_SHUTDOWN "AUDIT_LOG_SHUTDOWN" -#define EV_CIMC_CERT_VERIFICATION "CIMC_CERT_VERIFICATION" -#define EV_ROLE_ASSUME "ROLE_ASSUME" -#define EV_ENROLLMENT "ENROLLMENT" -#define EV_PIN_RESET "PIN_RESET" -#define EV_FORMAT "FORMAT" -#define EV_AUTHZ_FAIL "AUTHZ_FAIL" -#define EV_AUTHZ_SUCCESS "AUTHZ_SUCCESS" - -// config operations from the TUS interface -#define EV_CONFIG "CONFIG" // for config operations not specifically defined below -#define EV_CONFIG_ROLE "CONFIG_ROLE" -#define EV_CONFIG_TOKEN "CONFIG_TOKEN" -#define EV_CONFIG_PROFILE "CONFIG_PROFILE" -#define EV_CONFIG_AUDIT "CONFIG_AUDIT" - -#define EV_APPLET_UPGRADE "APPLET_UPGRADE" -#define EV_KEY_CHANGEOVER "KEY_CHANGEOVER" - -#define EV_RENEWAL "RENEWAL" - -// authentication for both user login for token ops and role user login (this is different from EV_AUTHZ which is for role authorization) -#define EV_AUTH_SUCCESS "AUTH_SUCCESS" -#define EV_AUTH_FAIL "AUTH_FAIL" - -#endif //AUDIT_H |