Solaris Operating System Audit Events

Solaris operating system audit events can include events such as AUE_AT_CREATE and AUE_AT_DELETE.

This audit event names used in the Solaris Operating System to their equivalent values in the command_class and target_type fields in the Oracle Database Security Central audit record. You can use the audit events mapped here to create custom audit reports using other Oracle Database reporting products or third-party tools.

See Also: Oracle Database Security Central Database Schemas for Oracle Database Security Central data warehouse details that may be useful in designing your own reports.

Table 1 lists the Solaris audit events and the equivalent Oracle Database Security Central events.

Table 1 Solaris Audit Events

Source Event Command Class Target Type
AUE_AT_CREATE CREATE AT JOB
AUE_AT_DELETE DELETE AT JOB
AUE_AUDITON_SETSMASK SET AUDIT SESSION
AUE_NDMP_RESTORE RESTORE BACKUP LOCATION
AUE_RSHD EXECUTE COMMAND
AUE_PROCESSOR_BIND BIND CPU
AUE_P_ONLINE CONTROL CPU
AUE_CRON_INVOKE EXECUTE CRON JOB
AUE_CRONTAB_CREATE CREATE CRON JOB
AUE_CRONTAB_DELETE DELETE CRON JOB
AUE_CRONTAB_MOD SET CRON JOB
AUE_IOCTL CONTROL DEVICE
AUE_ATTACH MOUNT DEVICE
AUE_DA_ALLOCATE ALLOCATE DEVICE
AUE_DA_ALLOCATE_FORCED ALLOCATE DEVICE
AUE_DA_DEALLOCATE DEALLOCATE DEVICE
AUE_DA_DEALLOCATE_FORCED DEALLOCATE DEVICE
AUE_DA_LIST_DEVICES LIST DEVICE
AUE_DETACH UNMOUNT DEVICE
AUE_REMOVE EJECT DEVICE
AUE_SMSERVERD CONTROL DEVICE
AUE_TPM_CERTIFYSELFTEST CONTROL DEVICE
AUE_TPM_CONTINUESELFTEST CONTROL DEVICE
AUE_TPM_DISABLEFORCECLEAR CONTROL DEVICE
AUE_TPM_DISABLEOWNERCLEAR CONTROL DEVICE
AUE_TPM_FIELDUPGRADE CONTROL DEVICE
AUE_TPM_FORCECLEAR CONTROL DEVICE
AUE_TPM_OWNERCLEAR CONTROL DEVICE
AUE_TPM_OWNERSETDISABLE CONTROL DEVICE
AUE_TPM_PHYSICALDEACTIVATE CONTROL DEVICE
AUE_TPM_PHYSICALDISABLE CONTROL DEVICE
AUE_TPM_PHYSICALENABLE CONTROL DEVICE
AUE_TPM_PHYSICALPRESENCE CONTROL DEVICE
AUE_TPM_RESETLOCKVALUE CONTROL DEVICE
AUE_TPM_SELFTESTFULL CONTROL DEVICE
AUE_TPM_SETOPERATORAUTH CONTROL DEVICE
AUE_TPM_SETOWNERINSTALL CONTROL DEVICE
AUE_TPM_SETTEMPDEACTIVATED CONTROL DEVICE
AUE_TPM_TAKEOWNERSHIP CONTROL DEVICE
AUE_MKDIR CREATE DIRECTORY
AUE_RMDIR DELETE DIRECTORY
AUE_FT_MKDIR CREATE DIRECTORY
AUE_FT_RMDIR DELETE DIRECTORY
AUE_DOORFS_DOOR_CALL EXECUTE DOOR HANDLER
AUE_DOORFS_DOOR_CREATE CREATE DOOR HANDLER
AUE_DOORFS_DOOR_RETURN EXIT DOOR HANDLER
AUE_DOORFS_DOOR_REVOKE DELETE DOOR HANDLER
AUE_ACCESS CHECK FILE
AUE_ACLSET CONTROL FILE
AUE_CHMOD SET FILE
AUE_CHOWN SET FILE
AUE_CLOSE CLOSE FILE
AUE_CREAT CREATE FILE
AUE_EXEC EXECUTE FILE
AUE_EXECVE EXECUTE FILE
AUE_FACCESSAT CHECK FILE
AUE_FACLSET SET FILE
AUE_FCHMOD SET FILE
AUE_FCHOWN SET FILE
AUE_FCHOWNAT SET FILE
AUE_FCNTL CONTROL FILE
AUE_FSTATAT GET FILE
AUE_FSTATFS GET FILE
AUE_FUSERS GET FILE
AUE_FUTIMESAT SET FILE
AUE_INST_SYNC WRITE FILE
AUE_LCHOWN SET FILE
AUE_LSTAT GET FILE
AUE_MMAP MAP FILE
AUE_OPENAT_R OPEN FILE
AUE_OPENAT_RC OPEN FILE
AUE_OPENAT_RT OPEN FILE
AUE_OPENAT_RTC OPEN FILE
AUE_OPENAT_RW OPEN FILE
AUE_OPENAT_RWC OPEN FILE
AUE_OPENAT_RWT OPEN FILE
AUE_OPENAT_RWTC OPEN FILE
AUE_OPENAT_W OPEN FILE
AUE_OPENAT_WC OPEN FILE
AUE_OPENAT_WT OPEN FILE
AUE_OPENAT_WTC OPEN FILE
AUE_OPEN_E OPEN FILE
AUE_OPEN_R OPEN FILE
AUE_OPEN_RC OPEN FILE
AUE_OPEN_RT OPEN FILE
AUE_OPEN_RTC OPEN FILE
AUE_OPEN_RW OPEN FILE
AUE_OPEN_RWC OPEN FILE
AUE_OPEN_RWT OPEN FILE
AUE_OPEN_RWTC OPEN FILE
AUE_OPEN_S OPEN FILE
AUE_OPEN_W OPEN FILE
AUE_OPEN_WC OPEN FILE
AUE_OPEN_WT OPEN FILE
AUE_OPEN_WTC OPEN FILE
AUE_PATHCONF GET FILE
AUE_PFEXEC EXECUTE FILE
AUE_RENAME RENAME FILE
AUE_RENAMEAT RENAME FILE
AUE_STAT CHECK FILE
AUE_STATFS CHECK FILE
AUE_UNLINK UNLINK FILE
AUE_UNLINKAT UNLINK FILE
AUE_UTIME SET FILE
AUE_UTIMES SET FILE
AUE_WRITE WRITE FILE
AUE_FILE_COPY COPY FILE
AUE_FILE_RELABEL LABEL FILE
AUE_PRINT_REQUEST PRINT FILE
AUE_PRINT_REQUEST_PS PRINT FILE
AUE_PRINT_REQUEST_UNLABELED PRINT FILE
AUE_PRINT_REQUEST_NOBANNER PRINT FILE
AUE_FT_CHMOD SET FILE
AUE_FT_CHOWN SET FILE
AUE_FT_GET RECEIVE FILE
AUE_FT_PUT SEND FILE
AUE_FT_REMOVE DELETE FILE
AUE_FT_RENAME RENAME FILE
AUE_FT_UTIMES SET FILE
AUE_NDMP_BACKUP BACKUP FILE
AUE_PROF_CMD EXECUTE FILE
AUE_SUDO EXECUTE FILE
AUE_VSCAN_QUARANTINE QUARANTINE FILE
AUE_PORTFS_ASSOCIATE BIND FILE PORT
AUE_PORTFS_DISSOCIATE UNBIND FILE PORT
AUE_MOUNT MOUNT FILE SYSTEM
AUE_STATVFS CHECK FILE SYSTEM
AUE_UMOUNT UNMOUNT FILE SYSTEM
AUE_UMOUNT2 UNMOUNT FILE SYSTEM
AUE_MOUNTD_MOUNT MOUNT FILE SYSTEM
AUE_MOUNTD_UMOUNT UNMOUNT FILE SYSTEM
AUE_UADMIN_REMOUNT REMOUNT FILE SYSTEM
AUE_UADMIN_SWAPCTL CONTROL FILE SYSTEM
AUE_FT_START OPEN FILE TRANSFER SESSION
AUE_FT_STOP CLOSE FILE TRANSFER SESSION
AUE_HOTPLUG_SET SET HOTPLUG CONNECTOR
AUE_HOTPLUG_INSTALL INSTALL HOTPLUG PORT
AUE_HOTPLUG_STATE SET HOTPLUG PORT
AUE_HOTPLUG_UNINSTALL UNINSTALL HOTPLUG PORT
AUE_ILB_CREATE_HEALTHCHECK CREATE ILB HEALTHCHECK OBJECT
AUE_ILB_DELETE_HEALTHCHECK DELETE ILB HEALTHCHECK OBJECT
AUE_ILB_CREATE_RULE CREATE ILB RULE
AUE_ILB_DELETE_RULE DELETE ILB RULE
AUE_ILB_DISABLE_RULE DISABLE ILB RULE
AUE_ILB_ENABLE_RULE ENABLE ILB RULE
AUE_ILB_DISABLE_SERVER DISABLE ILB SERVER
AUE_ILB_ENABLE_SERVER ENABLE ILB SERVER
AUE_ILB_REMOVE_SERVER DELETE ILB SERVER
AUE_ILB_ADD_SERVER ADD ILB SERVER GROUP
AUE_ILB_CREATE_SERVERGROUP CREATE ILB SERVER GROUP
AUE_ILB_DELETE_SERVERGROUP DELETE ILB SERVER GROUP
AUE_INETD_CONNECT CONNECT INET SERVICE
AUE_INETD_COPYLIMIT RESTRICT INET SERVICE
AUE_INETD_FAILRATE DISABLE INET SERVICE
AUE_INETD_RATELIMIT RESTRICT INET SERVICE
AUE_PF_POLICY_ADDRULE ADD IPSEC POLICY
AUE_PF_POLICY_ALGS UPDATE IPSEC POLICY
AUE_PF_POLICY_CLONE COPY IPSEC POLICY
AUE_PF_POLICY_DELRULE DELETE IPSEC POLICY
AUE_PF_POLICY_FLIP FLIP IPSEC POLICY
AUE_PF_POLICY_FLUSH CLEAR IPSEC POLICY
AUE_KADMIND_AUTH EXECUTE KERBEROS OPERATION
AUE_KADMIND_UNAUTH EXECUTE KERBEROS OPERATION
AUE_KRB5KDC_AS_REQ EXECUTE KERBEROS SERVICE
AUE_KRB5KDC_TGS_REQ EXECUTE KERBEROS SERVICE
AUE_KRB5KDC_TGS_REQ_2NDTKTMM EXECUTE KERBEROS SERVICE
AUE_KRB5KDC_TGS_REQ_ALT_TGT EXECUTE KERBEROS SERVICE
AUE_MODADDMAJ BIND KERNEL MODULE
AUE_MODDEVPLCY SET KERNEL MODULE
AUE_MODLOAD LOAD KERNEL MODULE
AUE_MODUNLOAD UNLOAD KERNEL MODULE
AUE_CONFIGKSSL CONTROL KERNEL SSL PORT
AUE_LINK CREATE LINK
AUE_READLINK READ LINK
AUE_FT_SYMLINK CREATE LINK
AUE_MEMCNTL CONTROL MEMORY
AUE_MUNMAP UNMAP MEMORY OBJECT
AUE_MSGCTL CONTROL MESSAGE QUEUE
AUE_MSGCTL_RMID DELETE MESSAGE QUEUE
AUE_MSGCTL_SET SET MESSAGE QUEUE
AUE_MSGCTL_STAT CHECK MESSAGE QUEUE
AUE_MSGGET GET MESSAGE QUEUE
AUE_MSGRCV RECEIVE MESSAGE QUEUE
AUE_MSGSND SEND MESSAGE QUEUE
AUE_NDMP_CONNECT CONNECT NDMP CLIENT
AUE_NDMP_DISCONNECT DISCONNECT NDMP CLIENT
AUE_NETCFG_REMOVE DELETE NETCFG PROFILE
AUE_NETCFG_UPDATE SET NETCFG PROFILE
AUE_NWAM_DISABLE DISABLE NETCFG PROFILE
AUE_NWAM_ENABLE ENABLE NETCFG PROFILE
AUE_PIPE CREATE PIPE
AUE_AUDITON_GETCAR GET PROCESS
AUE_AUDITON_GETCWD GET PROCESS
AUE_AUDITON_GETPINFO GET PROCESS
AUE_AUDITON_GETPINFO_ADDR GET PROCESS
AUE_AUDITON_SETPMASK SET PROCESS
AUE_CHDIR SET PROCESS
AUE_CHROOT SET PROCESS
AUE_CORE DUMP PROCESS
AUE_EXIT EXIT PROCESS
AUE_FCHDIR SET PROCESS
AUE_FCHROOT SET PROCESS
AUE_FORK CREATE PROCESS
AUE_FORK1 CREATE PROCESS
AUE_FORKALL CREATE PROCESS
AUE_GETAUDIT GET PROCESS
AUE_GETAUDIT_ADDR GET PROCESS
AUE_GETAUID GET PROCESS
AUE_KILL SIGNAL PROCESS
AUE_NICE SET PROCESS
AUE_SETAUDIT SET PROCESS
AUE_SETAUDIT_ADDR SET PROCESS
AUE_SETAUID SET PROCESS
AUE_SETEGID SET PROCESS
AUE_SETEUID SET PROCESS
AUE_SETGID SET PROCESS
AUE_SETGROUPS SET PROCESS
AUE_SETPGID SET PROCESS
AUE_SETPGRP SET PROCESS
AUE_SETPPRIV SET PROCESS
AUE_SETREGID SET PROCESS
AUE_SETREUID SET PROCESS
AUE_SETSID SET PROCESS
AUE_SETUID SET PROCESS
AUE_SHMAT BIND PROCESS
AUE_SHMDT UNBIND PROCESS
AUE_SIGQUEUE SIGNAL PROCESS
AUE_VFORK CREATE PROCESS
AUE_REXD EXECUTE RPC
AUE_REXECD EXECUTE RPC
AUE_SCREENLOCK LOCK SCREEN
AUE_SCREENUNLOCK UNLOCK SCREEN
AUE_SEMCTL CONTROL SEMAPHORE
AUE_SEMCTL_GETALL GET SEMAPHORE
AUE_SEMCTL_RMID DELETE SEMAPHORE
AUE_SEMCTL_SET SET SEMAPHORE
AUE_SEMCTL_SETALL SET SEMAPHORE
AUE_SEMCTL_SETVAL SET SEMAPHORE
AUE_SEMCTL_STAT CHECK SEMAPHORE
AUE_SEMGET GET SEMAPHORE
AUE_SEMOP CONTROL SEMAPHORE
AUE_SHMCTL CONTROL SHARED MEMORY
AUE_SHMCTL_RMID UNBIND SHARED MEMORY
AUE_SHMCTL_SET SET SHARED MEMORY
AUE_SHMCTL_STAT CHECK SHARED MEMORY
AUE_SHMGET GET SHARED MEMORY
AUE_SMF_ANNOTATION ANNOTATE SMF ACTION
AUE_SMF_MILESTONE ENABLE SMF MILESTONE
AUE_SMF_CREATE_PROP CREATE SMF PROPERTY
AUE_SMF_CREATE_NPG CREATE SMF PROPERTY GROUP
AUE_SMF_CREATE_PG CREATE SMF PROPERTY GROUP
AUE_SMF_CLEAR RESET SMF SERVICE
AUE_SMF_CREATE CREATE SMF SERVICE
AUE_SMF_DEGRADE DEGRADE SMF SERVICE
AUE_SMF_DELCUST DELETE SMF SERVICE
AUE_SMF_DELETE DELETE SMF SERVICE
AUE_SMF_DISABLE DISABLE SMF SERVICE
AUE_SMF_ENABLE ENABLE SMF SERVICE
AUE_SMF_IMMEDIATE_DEGRADE DEGRADE SMF SERVICE
AUE_SMF_IMMEDIATE_MAINTENANCE MAINTAIN SMF SERVICE
AUE_SMF_IMMTMP_MAINTENANCE MAINTAIN SMF SERVICE
AUE_SMF_MAINTENANCE MAINTAIN SMF SERVICE
AUE_SMF_REFRESH REFRESH SMF SERVICE
AUE_SMF_REMOVE DELETE SMF SERVICE
AUE_SMF_RESTART RESTART SMF SERVICE
AUE_SMF_TMP_DISABLE DISABLE SMF SERVICE
AUE_SMF_TMP_ENABLE ENABLE SMF SERVICE
AUE_SMF_TMP_MAINTENANCE MAINTAIN SMF SERVICE
AUE_SMF_UNMASK UNMASK SMF SERVICE
AUE_SMF_REMOVE_BUNDLE DELETE SMF SERVICE BUNDLE
AUE_SMF_CHANGE_PROP SET SMF SERVICE PROPERTY
AUE_SMF_DELCUST_PROP DELETE SMF SERVICE PROPERTY
AUE_SMF_DELETE_PROP DELETE SMF SERVICE PROPERTY
AUE_SMF_READ_PROP READ SMF SERVICE PROPERTY
AUE_SMF_REMOVE_PROP DELETE SMF SERVICE PROPERTY
AUE_SMF_UNMASK_PROP UNMASK SMF SERVICE PROPERTY
AUE_SMF_DELCUST_PG DELETE SMF SERVICE PROPERTY GROUP
AUE_SMF_DELETE_NPG DELETE SMF SERVICE PROPERTY GROUP
AUE_SMF_DELETE_PG DELETE SMF SERVICE PROPERTY GROUP
AUE_SMF_REMOVE_PG DELETE SMF SERVICE PROPERTY GROUP
AUE_SMF_UNMASK_PG UNMASK SMF SERVICE PROPERTY GROUP
AUE_SMF_ATTACH_SNAP ATTACH SMF SNAPSHOT
AUE_SMF_CREATE_SNAP CREATE SMF SNAPSHOT
AUE_SMF_DELETE_SNAP DELETE SMF SNAPSHOT
AUE_ACCEPT ACCEPT SOCKET
AUE_ACCEPT BIND SOCKET
AUE_CONNECT CONNECT SOCKET
AUE_RECV RECEIVE SOCKET
AUE_RECVFROM RECEIVE SOCKET
AUE_RECVMSG RECEIVE SOCKET
AUE_SEMCTL_GETNCNT GET SOCKET
AUE_SEMCTL_GETPID GET SOCKET
AUE_SEMCTL_GETVAL CHECK SOCKET
AUE_SEMCTL_GETZCNT CHECK SOCKET
AUE_SEND SEND SOCKET
AUE_SENDMSG SEND SOCKET
AUE_SENDTO SEND SOCKET
AUE_SETSOCKOPT SET SOCKET
AUE_SHUTDOWN SHUTDOWN SOCKET
AUE_SOCKACCEPT ACCEPT SOCKET
AUE_SOCKCONNECT CONNECT SOCKET
AUE_SOCKET CREATE SOCKET
AUE_SOCKRECEIVE RECEIVE SOCKET
AUE_SOCKSEND SEND SOCKET
AUE_SOCKCONFIG CONTROL SOCKET NAME
AUE_MKNOD CREATE SPECIAL FILE
AUE_GETMSG READ STREAM
AUE_GETPMSG READ STREAM
AUE_PUTMSG SEND STREAM
AUE_PUTPMSG SEND STREAM
AUE_SYMLINK CREATE SYMBOLIC LINK
AUE_SYSTEMBOOT BOOT SYSTEM
AUE_ACCT CONTROL SYSTEM PROPERTY
AUE_ADJTIME SET SYSTEM PROPERTY
AUE_AUDITON_GETAMASK GET SYSTEM PROPERTY
AUE_AUDITON_GETCLASS GET SYSTEM PROPERTY
AUE_AUDITON_GETCOND GET SYSTEM PROPERTY
AUE_AUDITON_GETKAUDIT GET SYSTEM PROPERTY
AUE_AUDITON_GETKMASK GET SYSTEM PROPERTY
AUE_AUDITON_GETSTAT GET SYSTEM PROPERTY
AUE_AUDITON_GPOLICY GET SYSTEM PROPERTY
AUE_AUDITON_GQCTRL GET SYSTEM PROPERTY
AUE_AUDITON_SETAMASK SET SYSTEM PROPERTY
AUE_AUDITON_SETCLASS SET SYSTEM PROPERTY
AUE_AUDITON_SETCOND SET SYSTEM PROPERTY
AUE_AUDITON_SETKAUDIT SET SYSTEM PROPERTY
AUE_AUDITON_SETKMASK SET SYSTEM PROPERTY
AUE_AUDITON_SETSTAT RESET SYSTEM PROPERTY
AUE_AUDITON_SPOLICY SET SYSTEM PROPERTY
AUE_AUDITON_SQCTRL SET SYSTEM PROPERTY
AUE_CLOCK_SETTIME SET SYSTEM PROPERTY
AUE_CRYPTOADM CONTROL SYSTEM PROPERTY
AUE_MODADDPRIV CONTROL SYSTEM PROPERTY
AUE_PRIOCNTLSYS CONTROL SYSTEM PROPERTY
AUE_SETRLIMIT SET SYSTEM PROPERTY
AUE_STIME SET SYSTEM PROPERTY
AUE_SYSINFO CONTROL SYSTEM PROPERTY
AUE_CPU_ONDEMAND SET SYSTEM PROPERTY
AUE_CPU_PERFORMANCE SET SYSTEM PROPERTY
AUE_CPU_THRESHOLD SET SYSTEM PROPERTY
AUE_UADMIN_CONFIG SET SYSTEM PROPERTY
AUE_ENTERPROM ENTER SYSTEM RESOURCE
AUE_EXITPROM EXIT SYSTEM RESOURCE
AUE_NTP_ADJTIME SET SYSTEM RESOURCE
AUE_LABELSYS_TNMLP CONTROL TRUSTED NETWORK MULTI-LEVEL PORT
AUE_LABELSYS_TNRH CONTROL TRUSTED NETWORK REMOTE HOST
AUE_LABELSYS_TNRHTP CONTROL TRUSTED NETWORK REMOTE HOST TEMPLATE
AUE_AUDITON_SETUMASK SET USER
AUE_ADMIN_AUTHENTICATE AUTHENTICATE USER
AUE_FTPD LOGON USER
AUE_FTPD_LOGOUT LOGOFF USER
AUE_LOGIN LOGON USER
AUE_LOGOUT LOGOFF USER
AUE_NEWGRP_LOGIN LOGON USER
AUE_PASSWD SET USER
AUE_RLOGIN LOGON USER
AUE_ROLE_LOGIN LOGON USER
AUE_ROLE_LOGOUT LOGOFF USER
AUE_SMBD_LOGOFF LOGOFF USER
AUE_SMBD_SESSION LOGON USER
AUE_SSH LOGON USER
AUE_SU LOGON USER
AUE_SU_LOGOUT LOGOFF USER
AUE_TELNET LOGON USER
AUE_ZLOGIN LOGON USER
AUE_DLADM_CREATE_SECOBJ CREATE WIFI SECURITY OBJECT
AUE_DLADM_DELETE_SECOBJ DELETE WIFI SECURITY OBJECT
AUE_XCONNECT CONNECT X CLIENT
AUE_XDISCONNECT DISCONNECT X CLIENT
AUE_POOL_EXPORT EXPORT ZFS POOL
AUE_POOL_IMPORT IMPORT ZFS POOL
AUE_BRANDSYS CONTROL ZONE
AUE_ZONE_STATE SET ZONE
AUE_HALT_SOLARIS SHUTDOWN None
AUE_INIT_SOLARIS SET None
AUE_POWEROFF_SOLARIS SHUTDOWN None
AUE_REBOOT_SOLARIS REBOOT None
AUE_SHUTDOWN_SOLARIS SHUTDOWN None
AUE_UADMIN_DUMP DUMP None
AUE_UADMIN_FREEZE SUSPEND None
AUE_UADMIN_FTRACE TRACE None
AUE_UADMIN_REBOOT REBOOT None
AUE_UADMIN_SHUTDOWN SHUTDOWN None
AUE_UADMIN_THAW RESUME None