Trusted Extensions Audit Tokens

Language:

The audit tokens that Trusted Extensions software adds to Oracle Solaris are listed alphabetically in the following table. The token definitions are listed in the audit.log(4) man page.

Table 22-1 Trusted Extensions Audit Tokens

Token Name	Description
label Token	Sensitivity label
xatom Token	X window atom identification
xcolormap Token	X window color information
xcursor Token	X window cursor information
xfont Token	X window font information
xgc Token	X window graphical context information
xpixmap Token	X window pixel mapping information
xproperty Token	X window property information
xselect Token	X window data information
xwindow Token	X window's window information

`label` Token

The label token contains a sensitivity label.

A label token is displayed by the praudit -x command as follows:

<sensitivity_label>ADMIN_LOW</sensitivity_label>

`xatom` Token

The xatom token identifies an X atom.

An xatom token is displayed by praudit as follows:

X atom,_DT_SAVE_MODE

`xcolormap` Token

The xcolormap token contains information about the use of colormaps, including the X server identifier and the creator's user ID.

An xcolormap token is displayed by praudit as follows:

<X_colormap xid="0x08c00005" xcreator-uid="srv"/>

`xcursor` Token

The xcursor token contains information about cursor use, including the X server identifier and the creator's user ID.

An xcursor token is displayed by praudit as follows:

X cursor,0x0f400006,srv

`xfont` Token

The xfont token contains information about the font use, including the X server identifier and the creator's user ID.

An xfont token is displayed by praudit as follows:

<X_font xid="0x08c00001" xcreator-uid="srv"/>

`xgc` Token

The xgc token contains information about the graphic context of an X window.

An xgc token is displayed by praudit as follows:

Xgraphic context,0x002f2ca0,srv

<X_graphic_context xid="0x30002804" xcreator-uid="srv"/>

`xpixmap` Token

The xpixmap token contains information about the use of pixel mappings, including the X server identifier and the creator's user ID.

An xpixmap token is displayed by praudit -x as follows:

<X_pixmap xid="0x2f002004" xcreator-uid="srv"/>

`xproperty` Token

The xproperty token contains information about various properties of a window, such as the X server identifier, the creator's user ID, and an atom identifier.

An xproperty token is displayed by praudit as follows:

X_property,0x000075d5,root,_MOTIF_DEFAULT_BINDINGS

`xselect` Token

The xselect token contains the data that is moved between windows. This data is a byte stream with no assumed internal structure and a property string.

An xselect token is displayed by praudit as follows:

X selection,entryfield,halogen

`xwindow` Token

The xwindow token identifies the Xserver and the creator's user ID.

An xwindow token is displayed by praudit as follows:

<X_window xid="0x07400001" xcreator-uid="srv"/>