source: trunk/src/sh_cat.c@ 263

Last change on this file since 263 was 260, checked in by katerina, 15 years ago

Support event correlation (ticket #178).
File size: 48.9 KB
RevLine 
[1]1#include "config_xor.h"
2
3#include "samhain.h"
4#include "sh_error.h"
5
6#include "sh_cat.h"
7
8/*@-nullassign@*/
9
[170]10const char * class_cat[] = {
[1]11 N_("AUD"), /* 0 */
12 N_("PANIC"), /* 1 */
13 N_("RUN_OLD"), /* 2 */
14 N_("FIL_OLD"), /* 3 */
15 N_("TCP"), /* 4 */
16 N_("ERR"), /* 5 */
17 N_("STAMP"), /* 6 */
18 N_("ENET"), /* 7 */
19 N_("EINPUT"), /* 8 */
20
21 /* new simplified classes */
22 N_("EVENT"), /* 9 */
23 N_("START"), /* 10 */
24 N_("LOGKEY"), /* 11 */
25 N_("OTHER"), /* 12 */
26 /* end simplified classes */
27
28 N_("RUN"), /* 13 */
29 N_("FIL"), /* 14 */
30 N_("ERROR"), /* 15 */
31 NULL
32};
33
34
35#ifdef SH_USE_XML
36
37cat_entry msg_cat[] = {
38
39#if defined(SH_WITH_CLIENT) || defined(SH_STANDALONE)
40 { MSG_FI_CSUM, SH_ERR_ALL, FIL, N_("msg=\"Checksum\" chk=\"%s\" path=\"%s\"")},
41 { MSG_FI_DSUM, SH_ERR_INFO, FIL, N_("msg=\"d: %3ld, -: %3ld, l: %3ld, |: %3ld, s: %3ld, c: %3ld, b: %3ld\"")},
42 { MSG_FI_CHK, SH_ERR_INFO, FIL, N_("msg=\"Checking\" path=\"%s\"")},
43#endif
44
45 { MSG_EXIT_ABORTS, SH_ERR_FATAL, PANIC, N_("msg=\"PANIC %s\" program=\"%s\" subroutine=\"%s\"")},
46 { MSG_START_SRV, SH_ERR_STAMP, START, N_("msg=\"Server up, simultaneous connections: %d\" socket_id=\"%d\"")},
47
48 { MSG_EXIT_ABORT1, SH_ERR_FATAL, PANIC, N_("msg=\"PANIC Error initializing the application\" program=\"%s\"")},
49 { MSG_EXIT_NORMAL, SH_ERR_FATAL, START, N_("msg=\"EXIT\" program=\"%s\" status=\"%s\"")},
50 { MSG_START_KEY_MAIL, SH_ERR_FATAL, LOGKEY, N_("msg=\"LOGKEY\" program=\"%s\" hash=\"%s\"\r\n-----BEGIN LOGKEY-----\r\n%s%s")},
51 { MSG_START_KEY, SH_ERR_FATAL, LOGKEY, N_("msg=\"LOGKEY\" program=\"%s\" hash=\"%s\"")},
52 { MSG_START_0H, SH_ERR_FATAL, START, N_("msg=\"START\" program=\"%s\" userid=\"%ld\"")},
53 { MSG_START_1H, SH_ERR_FATAL, START, N_("msg=\"START\" program=\"%s\" userid=\"%ld\" path=\"%s\" hash=\"%s\"")},
54 { MSG_START_2H, SH_ERR_FATAL, START, N_("msg=\"START\" program=\"%s\" userid=\"%ld\" path=\"%s\" hash=\"%s\" path_data=\"%s\" hash_data=\"%s\"")},
55 { MSG_START_GH, SH_ERR_FATAL, START, N_("msg=\"START\" program=\"%s\" userid=\"%ld\" path=\"%s\" key_uid=\"%s\" key_id=\"%s\"")},
56 { MSG_START_GH2, SH_ERR_FATAL, START, N_("msg=\"EXIT\" program=\"%s\" userid=\"%ld\" path=\"%s\" key_uid=\"%s\" key_id=\"%s\" path_data=\"%s\" key_uid_data=\"%s\" key_id_data=\"%s\"")},
57 { MSG_SUSPEND, SH_ERR_STAMP, START, N_("msg=\"SUSPEND\" program=\"%s\"")},
58
59
60 { MSG_MLOCK, SH_ERR_WARN, RUN, N_("msg=\"Using insecure memory\"")},
61 { MSG_W_SIG, SH_ERR_WARN, RUN, N_("interface=\"sigaction\" msg=\"%s\" sig=\"%ld\"")},
62 { MSG_W_CHDIR, SH_ERR_ERR, RUN, N_("interface=\"chdir\" msg=\"%s\" path=\"%s\"")},
63
64 { MSG_MOD_FAIL, SH_ERR_WARN, RUN, N_("msg=\"Module not initialized\" module=\"%s\" return_code=\"%ld\"")},
65 { MSG_MOD_OK, SH_ERR_INFO, RUN, N_("msg=\"Module initialized\" module=\"%s\"")},
66 { MSG_MOD_EXEC, SH_ERR_ERR, RUN, N_("msg=\"Module execution error\" module=\"%s\" return_code=\"%ld\"")},
67
68 { MSG_RECONF, SH_ERR_SEVERE, START, N_("msg=\"Runtime configuration reloaded\"")},
69
70 { MSG_CHECK_0, SH_ERR_WARN, RUN, N_("msg=\"No files or directories defined for checking\"")},
71 { MSG_CHECK_1, SH_ERR_STAMP, STAMP, N_("msg=\"File check completed.\" time=\"%ld\" kBps=\"%f\"")},
72 { MSG_STAMP, SH_ERR_STAMP, STAMP, N_("msg=\"---- TIMESTAMP ----\"")},
73
74 { MSG_D_START, SH_ERR_INFO, RUN, N_("msg=\"Downloading configuration file\"")},
75 { MSG_D_DSTART, SH_ERR_INFO, RUN, N_("msg=\"Downloading database file\"")},
76 { MSG_D_FAIL, SH_ERR_INFO, RUN, N_("msg=\"No file from server, trying local file\"")},
77
78
79#ifndef HAVE_URANDOM
80 { MSG_ENSTART, SH_ERR_ALL, RUN, N_("msg=\"Found entropy source\" path=\"%s\"")},
81 { MSG_ENEXEC, SH_ERR_ALL, RUN, N_("msg=\"Execute entropy source\" path=\"%s\" rd_file_id=\"%ld\"")},
82 { MSG_ENFAIL, SH_ERR_ALL, RUN, N_("msg=\"Could not execute entropy source\" path=\"%s\"")},
83 { MSG_ENTOUT, SH_ERR_ALL, RUN, N_("msg=\"Timeout in entropy collector\" time=\"%ld\"")},
84 { MSG_ENCLOS, SH_ERR_ALL, RUN, N_("msg=\"End of data, closing entropy source\" rd_file_id=\"%ld\"")},
85 { MSG_ENCLOS1, SH_ERR_ALL, RUN, N_("msg=\"Close entropy source\" rd_file_id=\"%ld\"")},
86 { MSG_ENREAD, SH_ERR_ALL, RUN, N_("msg=\"Data from entropy source\" rd_file_id=\"%ld\" bytes=\"%ld\"")},
87#endif
88
89#ifdef SH_USE_SUIDCHK
90 { MSG_SUID_POLICY, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [SuidCheck] %s\" path=\"%s\" %s") },
91 { MSG_SUID_FOUND, SH_ERR_INFO, RUN, N_("msg=\"Found suid/sgid file\" path=\"%s\"") },
92 { MSG_SUID_SUMMARY,SH_ERR_INFO, RUN, N_("msg=\"Checked for SUID programs: %ld files, %ld seconds\"") },
93 { MSG_SUID_QREPORT,SH_ERR_SEVERE, EVENT, N_("msg=\"Quarantine report: %s\" path=\"%s\"") },
94 { MSG_SUID_ERROR, SH_ERR_SEVERE, EVENT, N_("msg=\"Quarantine error: %s\"") },
95#endif
96
97#ifdef SH_USE_KERN
98 /* FreeBSD */
[183]99 { MSG_KERN_POLICY, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Kernel] BSD syscall table: new: %#lx old: %#lx\" syscall=\"%03d %s\"") },
100 { MSG_KERN_POL_CO, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Kernel] BSD syscall code: new: %#x,%#x old: %#x,%#x\" syscall=\"%03d %s\"") },
[1]101
102 /* Linux */
103 { MSG_KERN_SYSCALL,SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Kernel] SYSCALL modified syscall\" syscall=\"%03d %s\" %s") },
104 { MSG_KERN_PROC, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Kernel] PROC modified proc filesystem: %s\"") },
105 { MSG_KERN_IDT, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Kernel] IDT modified interrupt %03d: new: 0x%-8.8lx %-9s %3d %c old: 0x%-8.8lx %-9s %3d %c\" %s") },
106 { MSG_KERN_GATE, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Kernel] SYS_GATE modified system_call: new: %#x,%#x old: %#x,%#x\" syscall=\"%03d %s\" %s") },
107
108#endif
109
110#ifdef SH_USE_UTMP
111 { MSG_UT_CHECK, SH_ERR_INFO, RUN, N_("msg=\"Checking logins\"")},
112 { MSG_UT_LG1X, SH_ERR_INFO, EVENT, N_("msg=\"Login\" userid=\"%s\" tty=\"%s\" host=\"%s\" ip=\"%s\" time=\"%s\" status=\"%d\"")},
113 { MSG_UT_LG1A, SH_ERR_INFO, EVENT, N_("msg=\"Login\" userid=\"%s\" tty=\"%s\" host=\"%s\" time=\"%s\" status=\"%d\"")},
114 { MSG_UT_LG1B, SH_ERR_INFO, EVENT, N_("msg=\"Login\" userid=\"%s\" tty=\"%s\" time=\"%s\" status=\"%d\"")},
115 { MSG_UT_LG2X, SH_ERR_INFO, EVENT, N_("msg=\"Multiple login\" userid=\"%s\" tty=\"%s\" host=\"%s\" ip=\"%s\" time=\"%s\" status=\"%d\"")},
116 { MSG_UT_LG2A, SH_ERR_INFO, EVENT, N_("msg=\"Multiple login\" userid=\"%s\" tty=\"%s\" host=\"%s\" time=\"%s\" status=\"%d\"")},
117 { MSG_UT_LG2B, SH_ERR_INFO, EVENT, N_("msg=\"Multiple login\" userid=\"%s\" tty=\"%s\" time=\"%s\" status=\"%d\"")},
118 { MSG_UT_LG3X, SH_ERR_INFO, EVENT, N_("msg=\"Logout\" userid=\"%s\" tty=\"%s\" host=\"%s\" ip=\"%s\" time=\"%s\" status=\"%d\"")},
119 { MSG_UT_LG3A, SH_ERR_INFO, EVENT, N_("msg=\"Logout\" userid=\"%s\" tty=\"%s\" host=\"%s\" time=\"%s\" status=\"%d\"")},
120 { MSG_UT_LG3B, SH_ERR_INFO, EVENT, N_("msg=\"Logout\" userid=\"%s\" tty=\"%s\" time=\"%s\" status=\"%d\"")},
121 { MSG_UT_LG3C, SH_ERR_INFO, EVENT, N_("msg=\"Logout\" tty=\"%s\" time=\"%s\" status=\"%d\"")},
122 { MSG_UT_ROT, SH_ERR_WARN, RUN, N_("msg=\"Logfile size decreased\" path=\"%s\"")},
123
124#endif
125
[68]126#ifdef SH_USE_PROCESSCHECK
[144]127 { MSG_PCK_CHECK, SH_ERR_INFO, RUN, N_("msg=\"Checking processes in pid interval [%ld,%ld]\"")},
[68]128 { MSG_PCK_OK, SH_ERR_ALL, RUN, N_("msg=\"PID %ld found with tests %s\"")},
[78]129 { MSG_PCK_P_HIDDEN,SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Process] Hidden pid: %ld tests: %s\" path=\"%s\" userid=\"%s\"")},
[68]130 { MSG_PCK_HIDDEN, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Process] Hidden pid: %ld tests: %s\"")},
131 { MSG_PCK_FAKE, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Process] Fake pid: %ld tests: %s\"")},
132 { MSG_PCK_MISS, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Process] Missing: %s\"")},
133#endif
134
135#ifdef SH_USE_PORTCHECK
[169]136 { MSG_PORT_MISS, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [ServiceMissing] %s\"")},
[206]137 { MSG_PORT_NEW, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [ServiceNew] %s\" path=\"%s\" pid=\"%lu\" userid=\"%s\"")},
138 { MSG_PORT_RESTART,SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [ServiceRestarted] %s\" path=\"%s\" pid=\"%lu\" userid=\"%s\"")},
139 { MSG_PORT_NEWPORT,SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [ServicePortSwitch] %s\" path=\"%s\" pid=\"%lu\" userid=\"%s\"")},
[68]140#endif
141
[1]142#ifdef SH_USE_MOUNTS
[144]143 { MSG_MNT_CHECK, SH_ERR_INFO, RUN, N_("msg=\"Checking mounts\"")},
[1]144 { MSG_MNT_MEMLIST, SH_ERR_ERR, RUN, N_("msg=\"Cannot read mount list from memory\"")},
[183]145 { MSG_MNT_MNTMISS, SH_ERR_WARN, EVENT, N_("msg=\"POLICY [Mounts] Mount missing\" path=\"%s\"")},
146 { MSG_MNT_OPTMISS, SH_ERR_WARN, EVENT, N_("msg=\"POLICY [Mounts] Mount option missing\" path=\"%s\" option=\"%s\"")},
[1]147#endif
148
149#ifdef SH_USE_USERFILES
150 { MSG_USERFILES_SUMMARY,SH_ERR_INFO, RUN, N_("msg=\"Checked for users files\"") },
151#endif
152
[183]153#ifdef USE_LOGFILE_MONITOR
154 { MSG_LOGMON_CHKS, SH_ERR_INFO, RUN, N_("msg=\"Checking logfile %s\"") },
155 { MSG_LOGMON_CHKE, SH_ERR_INFO, RUN, N_("msg=\"Finished logfile %s, %lu new records processed\"") },
156 { MSG_LOGMON_MISS, SH_ERR_ERR, RUN, N_("msg=\"Missing logfile %s\"") },
157 { MSG_LOGMON_EOPEN,SH_ERR_ERR, RUN, N_("msg=\"Cannot open logfile %s\"") },
158 { MSG_LOGMON_EREAD,SH_ERR_ERR, RUN, N_("msg=\"Error while reading logfile %s\"") },
159 { MSG_LOGMON_REP, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Logfile] %s\" time=\"%s\" host=\"%s\" path=\"%s\"") },
160 { MSG_LOGMON_SUM, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Logfile] %s\" host=\"%s\" path=\"%s\"") },
[260]161 { MSG_LOGMON_COR, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Logfile] Correlated events %s\"") },
[183]162#endif
163
[1]164#if defined(SH_WITH_CLIENT) || defined(SH_STANDALONE)
165
166 { MSG_FI_TOOLATE, SH_ERR_ERR, FIL, N_("msg=\"Large lstat/open overhead: %ld sec\" path=\"%s\"")},
167
168#if 0
169 { MSG_FI_CSUM, SH_ERR_ALL, FIL, N_("msg=\"Checksum\" chk=\"%s\" path=\"%s\"")},
170 { MSG_FI_DSUM, SH_ERR_INFO, FIL, N_("msg=\"d: %3ld, -: %3ld, l: %3ld, |: %3ld, s: %3ld, c: %3ld, b: %3ld\"")},
171 { MSG_FI_CHK, SH_ERR_INFO, FIL, N_("msg=\"Checking\" path=\"%s\"")},
172#endif
173
174 { MSG_FI_NULL, SH_ERR_ERR, FIL, N_("msg=\"Path is NULL\"")},
175 { MSG_FI_FAIL, SH_ERR_ERR, FIL, N_("msg=\"Check failed\" path=\"%s\"")},
176 { MSG_FI_GLOB, SH_ERR_ERR, FIL, N_("interface=\"glob\" msg=\"%s\" path=\"%s\"")},
177 { MSG_FI_COLL, SH_ERR_WARN, FIL, N_("msg=\"Writeable file with timestamps of parent directory fixed\" dir=\"%s\" path=\"%s\"")},
178 { MSG_FI_DOUBLE, SH_ERR_WARN, FIL, N_("msg=\"File or directory appears twice in configuration\" path=\"%s\"")},
179 { MSG_FI_2LONG, SH_ERR_ERR, FIL, N_("msg=\"Filename too long\" path=\"%s\"")},
180 { MSG_FI_2LONG2, SH_ERR_ERR, FIL, N_("msg=\"Filename too long\" path=\"%s/%s\"")},
181 { MSG_FI_NOPATH, SH_ERR_ERR, FIL, N_("msg=\"Filename not an absolute path\" path=\"%s\"")},
182 { MSG_FI_DLNK, SH_ERR_INFO, FIL, N_("msg=\"Dangling link\" path=\"%s\" linked_path=\"%s\"")},
183 { MSG_FI_RDLNK, SH_ERR_ERR, FIL, N_("interface=\"readlink\" msg=\"%s\" path=\"%s\"")},
184 { MSG_FI_NOGRP, SH_ERR_ERR, FIL, N_("interface=\"getgrgid\" msg=\"No such group\" group=\"%ld\" path=\"%s\"")},
185 { MSG_FI_NOUSR, SH_ERR_ERR, FIL, N_("interface=\"getpwuid\" msg=\"No such user\" userid=\"%ld\" path=\"%s\"")},
[192]186 { MSG_FI_STAT, SH_ERR_ERR, FIL, N_("interface=\"%s\" msg=\"%s\" userid=\"%ld\" path=\"%s\"")},
[1]187 { MSG_FI_OBSC, SH_ERR_ERR, FIL, N_("msg=\"Weird filename\" path=\"%s\"")},
188 { MSG_FI_OBSC2, SH_ERR_ERR, FIL, N_("msg=\"Weird filename\" path=\"%s/%s\"")},
189 { MSG_FI_LIST, SH_ERR_ALL, FIL, N_("msg=\"%10s %2d %8s %8s %14ld %21s %s\"")},
190 { MSG_FI_LLNK, SH_ERR_ALL, FIL, N_("msg=\" >>> %10s %s\"")},
191 { MSG_FI_MISS, SH_ERR_ERR, EVENT, N_("msg=\"POLICY MISSING\" path=\"%s\"")},
192 { MSG_FI_MISS2, SH_ERR_ERR, EVENT, N_("msg=\"POLICY MISSING\" path=\"%s\" %s")},
193 { MSG_FI_ADD, SH_ERR_ERR, EVENT, N_("msg=\"POLICY ADDED\" path=\"%s\"")},
194 { MSG_FI_ADD2, SH_ERR_ERR, EVENT, N_("msg=\"POLICY ADDED\" path=\"%s\" %s")},
195 { MSG_FI_CHAN, SH_ERR_ERR, EVENT, N_("msg=\"POLICY %s %s\" path=\"%s\" %s")},
196 { MSG_FI_NODIR, SH_ERR_ERR, EVENT, N_("msg=\"POLICY NODIRECTORY\" path=\"%s\"")},
197 { MSG_FI_DBEX, SH_ERR_WARN, FIL, N_("msg=\"Signature database exists\" path=\"%s\"")},
198#endif
199
200 { MSG_TCP_NETRP, SH_ERR_ERR, TCP, N_("msg=\"Connection error: %s\" port=\"%ld\" subroutine=\"%s\"")},
201
202#ifndef SH_STANDALONE
203
204#ifdef INET_SYSLOG
205 { MSG_INET_SYSLOG, SH_ERR_INET, TCP, N_("ip=\"%s\" facility=\"%s\" priority=\"%s\" syslog_msg=\"%s\"")},
206 { MSG_ERR_SYSLOG, SH_ERR_ERR, TCP, N_("msg=\"syslog socket: %s\" ip=\"%s\"")},
207#endif
208 { MSG_TCP_MISMATCH,SH_ERR_ERR, TCP, N_("msg=\"Protocol mismatch\"")},
209 { MSG_TCP_MISENC, SH_ERR_ERR, TCP, N_("msg=\"Encryption mismatch in %s: server: %s client: %s\"")},
[68]210 { MSG_TCP_NONAME, SH_ERR_ERR, TCP, N_("msg=\"No server name known\"")},
[1]211 { MSG_TCP_UNEXP, SH_ERR_ERR, TCP, N_("msg=\"Unexpected reply\"")},
212 { MSG_TCP_EFIL, SH_ERR_ERR, TCP, N_("msg=\"Could not open temporary file\"")},
213 { MSG_TCP_NOCONF, SH_ERR_ERR, TCP, N_("msg=\"Message delivery not confirmed\"")},
214 { MSG_TCP_NOAUTH, SH_ERR_ERR, TCP, N_("msg=\"Session key negotiation failed\"")},
215 { MSG_TCP_CONF, SH_ERR_ALL, TCP, N_("msg=\"Message delivery confirmed\"")},
216 { MSG_TCP_AUTH, SH_ERR_INFO, TCP, N_("msg=\"Session key negotiated\"")},
217 { MSG_TCP_FOK, SH_ERR_INFO, TCP, N_("msg=\"File download completed\"")},
218 { MSG_TCP_FBAD, SH_ERR_ERR, TCP, N_("msg=\"File download failed\"")},
219 { MSG_TCP_ECONN, SH_ERR_ERR, TCP, N_("msg=\"Connection error: %s\"")},
220 { MSG_TCP_EZERO, SH_ERR_ERR, TCP, N_("msg=\"Illegal zero reply\"")},
221 { MSG_TCP_EBGN, SH_ERR_ERR, TCP, N_("msg=\"Error in big integer library\"")},
222
223 { MSG_TCP_CREG, SH_ERR_ALL, TCP, N_("msg=\"Registered %s, salt %s, verifier %s\"")},
224 { MSG_TCP_FAUTH, SH_ERR_INFO, TCP, N_("msg=\"Force authentication\" host=\"%s\"")},
225
226 { MSG_TCP_RESCLT, SH_ERR_SEVERE, TCP, N_("msg=\"Cannot resolve client name\" host=\"%s\"")},
227 { MSG_TCP_RESPEER, SH_ERR_SEVERE, TCP, N_("msg=\"Cannot resolve socket peer IP for client\" host=\"%s\" peer=\"%s\"")},
228 { MSG_TCP_LOOKERS, SH_ERR_SEVERE, TCP, N_("msg=\"Reverse lookup of socket peer failed\" host=\"%s\" peer=\"%s\" obj=\"%s\"")},
229 { MSG_TCP_LOOKUP, SH_ERR_SEVERE, TCP, N_("msg=\"No socket peer alias matches client name\" host=\"%s\" peer=\"%s\"")},
230
231 { MSG_TCP_TIMOUT, SH_ERR_SEVERE, TCP, N_("msg=\"Connection timeout\" host=\"%s\"")},
232 { MSG_TCP_TIMEXC, SH_ERR_SEVERE, TCP, N_("msg=\"Time limit exceeded\" host=\"%s\"")},
233 { MSG_TCP_NOCLT, SH_ERR_SEVERE, TCP, N_("msg=\"Hostname is NULL\"")},
234 { MSG_TCP_BADCONN, SH_ERR_SEVERE, TCP, N_("msg=\"Invalid connection attempt: %s\" host=\"%s\"")},
235 { MSG_TCP_FFILE , SH_ERR_SEVERE, TCP, N_("msg=\"Unknown file request\" host=\"%s\" path=\"%s\"")},
236 { MSG_TCP_NFILE , SH_ERR_SEVERE, TCP, N_("msg=\"Requested file not found\" host=\"%s\" path=\"%s\"")},
237 { MSG_TCP_FINV , SH_ERR_SEVERE, TCP, N_("msg=\"Invalid request (%d) in pass %d\" host=\"%s\" request=\"%c%03o%c%03o%c%03o%c%03o\"")},
238 { MSG_TCP_OKFILE, SH_ERR_INFO, TCP, N_("msg=\"File transfer completed\" host=\"%s\"")},
239 { MSG_TCP_OKMSG, SH_ERR_ALL, TCP, N_("msg=\"Message transfer completed\" host=\"%s\"")},
240 { MSG_TCP_MSG, SH_ERR_INET, TCP, N_("remote_host=\"%s\" > %s </log>")},
241 { MSG_TCP_NEW, SH_ERR_NOTICE, TCP, N_("msg=\"NEW CLIENT\" host=\"%s\"")},
242 { MSG_TCP_ILL, SH_ERR_SEVERE, TCP, N_("msg=\"Restart without prior exit\" host=\"%s\"")},
243 { MSG_TCP_SYNC, SH_ERR_SEVERE, TCP, N_("msg=\"Out of sync\" host=\"%s\"")},
[113]244 { MSG_TCP_RESET, SH_ERR_NOTICE, TCP, N_("msg=\"Connection reset by peer\" host=\"%s\"")},
[1]245 { MSG_TCP_CNEW, SH_ERR_INFO, TCP, N_("msg=\"New connection\" socket_id=\"%d\"")},
246 { MSG_E_HTML, SH_ERR_ERR, ERR, N_("msg=\"Error writing HTML status\"")},
247#endif
248
249
250 { MSG_E_AUTH, SH_ERR_FATAL, PANIC, N_("msg=\"PANIC - File modified\" path=\"%s\"")},
251 { MSG_ACCESS, SH_ERR_FATAL, PANIC, N_("msg=\"PANIC - Access violation\" userid=\"%ld\" path=\"%s\"")},
252 { MSG_TRUST, SH_ERR_FATAL, PANIC, N_("msg=\"PANIC - Untrusted path\" userid=\"%ld\" path=\"%s\"")},
253 { MSG_NOACCESS, SH_ERR_FATAL, PANIC, N_("msg=\"PANIC - File not accessible\" userid=\"%ld\" path=\"%s\"")},
254 { MSG_P_NODATA, SH_ERR_FATAL, PANIC, N_("msg=\"PANIC - No data in file\" path=\"%s\"")},
255
256
257#ifndef MEM_DEBUG
258 { MSG_E_MNULL, SH_ERR_ERR, ERR, N_("msg=\"Dereferenced NULL pointer\"")},
259 { MSG_E_MMEM, SH_ERR_ERR, ERR, N_("msg=\"Out of memory\"")},
260#else
261 { MSG_MSTAMP, SH_ERR_STAMP, STAMP, N_("msg=\"Memory used: max.=%lu, current=%lu\"")},
262 { MSG_MSTAMP2, SH_ERR_STAMP, STAMP, N_("msg=\"Blocks: %d allocated, %d freed, %d maximum\"")},
[257]263 { MSG_E_MNULL, SH_ERR_ERR, ERR, N_("msg=\"Dereferenced NULL pointer allocated in %s, line %d\" source_file=\"%s\" source_line=\"%d\"")},
[1]264 { MSG_E_MMEM, SH_ERR_ERR, ERR, N_("msg=\"Out of memory\" source_file=\"%s\" source_line=\"%d\"")},
265 { MSG_E_MREC, SH_ERR_ERR, ERR, N_("msg=\"Free() on unrecorded block\" source_file=\"%s\" source_line=\"%d\"")},
266 { MSG_E_MOVER, SH_ERR_ERR, ERR, N_("msg=\"Memory overrun on block allocated in %s, line %d\" source_file=\"%s\" source_line=\"%d\"")},
267 { MSG_E_MUNDER, SH_ERR_ERR, ERR, N_("msg=\"Memory underrun on block allocated in %s, line %d\" source_file=\"%s\" source_line=\"%d\"")},
268 { MSG_E_NOTFREE, SH_ERR_ERR, ERR, N_("msg=\"Block not deallocated\" size=\"%14ld\" source_file=\"%19s\" source_line=\"%d\"")},
269#endif
270
271 { MSG_E_TRUST, SH_ERR_ERR, ERR, N_("msg=\"Untrusted path\" userid=\"%ld\" path=\"%s\"")},
272 { MSG_E_HASH, SH_ERR_ERR, ERR, N_("msg=\"Incorrect checksum\" path=\"%s\"")},
273 { MSG_E_ACCESS, SH_ERR_ERR, ERR, N_("msg=\"File not accessible\" userid=\"%ld\" path=\"%s\"")},
[192]274 { MSG_E_READ, SH_ERR_ERR, ERR, N_("msg=\"Not accessible or not a regular file (%s / %s)\" path=\"%s\"")},
[185]275 { MSG_E_NOTREG, SH_ERR_ERR, ERR, N_("msg=\"Not a regular file\" path=\"%s\"")},
[1]276 { MSG_E_TIMEOUT, SH_ERR_ERR, ERR, N_("msg=\"Timeout (%d sec) while checksumming file\" path=\"%s\"")},
[170]277 { MSG_NODEV, SH_ERR_ERR, ERR, N_("msg=\"Device not available or timeout during read attempt\" userid=\"%ld\" path=\"%s\"")},
[1]278 { MSG_LOCKED, SH_ERR_ERR, ERR, N_("msg=\"File lock error\" userid=\"%ld\" path=\"%s\" obj=\"%s\"")},
279 { MSG_PIDFILE, SH_ERR_ERR, ERR, N_("msg=\"Could not write PID file\" userid=\"%ld\" path=\"%s\"")},
280 { MSG_NOEXEC, SH_ERR_ERR, ERR, N_("msg=\"Could not execute file\" userid=\"%ld\" path=\"%s\"")},
281
282 { MSG_ES_ENT, SH_ERR_ERR, ERR, N_("msg=\"No entropy collected\" subroutine=\"%s\"")},
283 { MSG_ES_KEY1, SH_ERR_ERR, ERR, N_("msg=\"Insecure key generation\" subroutine=\"%s\"")},
284 { MSG_ES_KEY2, SH_ERR_ERR, ERR, N_("msg=\"Error copying key\" subroutine=\"%s\"")},
285 { MSG_E_GPG, SH_ERR_ERR, ERR, N_("msg=\"Compiled-in gpg checksum does not match: need %s got %s\"")},
286 { MSG_E_GPG_FP, SH_ERR_ERR, ERR, N_("msg=\"Compiled-in fingerprint modified: one %s two %s\"")},
287 { MSG_E_GPG_CHK, SH_ERR_ERR, ERR, N_("msg=\"Compiled-in checksum modified: one %s two %s\"")},
288 { MSG_E_SUBGEN, SH_ERR_ERR, ERR, N_("msg=\"%s\" subroutine=\"%s\"")},
289 { MSG_E_SUBGPATH, SH_ERR_ERR, ERR, N_("msg=\"%s\" subroutine=\"%s\" path=\"%s\"")},
290 { MSG_E_UNLNK, SH_ERR_ERR, FIL, N_("interface=\"unlink\" msg=\"%s\" path=\"%s\"")},
291 { MSG_E_REGEX, SH_ERR_ERR, ERR, N_("interface=\"regcomp\" msg=\"%s\" obj=\"%s\"")},
292 { MSG_E_OPENDIR, SH_ERR_ERR, FIL, N_("interface=\"opendir\" msg=\"%s\" path=\"%s\"")},
293 { MSG_E_TRUST1, SH_ERR_ERR, ERR, N_("msg=\"%s\" subroutine=\"trustfile\" path=\"%s\"")},
294 { MSG_E_TRUST2, SH_ERR_ERR, ERR, N_("msg=\"%s\" subroutine=\"trustfile\" path=\"%s\" obj=\"%s\"")},
295 { MSG_E_PWNULL, SH_ERR_ERR, ERR, N_("msg=\"Empty password file entry: %s\" subroutine=\"%s\" userid=\"%ld\" obj=\"%s\"")},
296 { MSG_E_PWLONG, SH_ERR_ERR, ERR, N_("msg=\"Password file entry too long\" subroutine=\"%s\" userid=\"%ld\" obj=\"%s\"")},
297 { MSG_E_GRNULL, SH_ERR_ERR, ERR, N_("msg=\"Empty groups file entry: %s\" subroutine=\"%s\" group=\"%ld\" obj=\"%s\"")},
298
299 { MSG_E_NET, SH_ERR_ERR, ENET, N_("msg=\"%s\" subroutine=\"%s\" service=\"%s\" host=\"%s\"")},
300 { MSG_E_NETST, SH_ERR_ERR, ENET, N_("msg=\"Invalid connection state\" expect=\"%4s\" received=\"%4s\"")},
301 { MSG_E_NETST1, SH_ERR_ERR, ENET, N_("msg=\"Invalid connection state\" expect=\"%4s\" received=\"%4s\" host=\"%s\"")},
302 { MSG_E_NLOST, SH_ERR_ERR, ENET, N_("msg=\"Connection failure\" service=\"%s\" host=\"%s\"")},
303 { MSG_E_NEST, SH_ERR_ERR, ENET, N_("msg=\"Connection reestablished\" service=\"%s\" host=\"%s\"")},
304
305 { MSG_EINVALHEAD, SH_ERR_WARN, EINPUT,N_("msg=\"Unrecognized section heading in line %ld of configuration file\"")},
306 { MSG_EINVALCONF, SH_ERR_WARN, EINPUT,N_("msg=\"Invalid line %ld in configuration file: incorrect format, unrecognized option, or missing section header\"")},
307 { MSG_EINVALS, SH_ERR_WARN, EINPUT,N_("msg=\"Invalid input\" option=\"%s\" obj=\"%s\"")},
308 { MSG_EINVALL, SH_ERR_WARN, EINPUT,N_("msg=\"Invalid input\" option=\"%s\" obj=\"%ld\"")},
309 { MSG_EINVALD, SH_ERR_WARN, EINPUT,N_("msg=\"Configuration file: unmatched @end\" option=\"%s\" obj=\"%ld\"")},
310 { MSG_EINVALDD, SH_ERR_WARN, EINPUT,N_("msg=\"Configuration file: missing @end\" option=\"%s\" obj=\"%ld\"")},
311
312 { MSG_SRV_FAIL, SH_ERR_ERR, ERR, N_("msg=\"Service failure\" service=\"%s\" obj=\"%s\"")},
313 { MSG_QUEUE_FULL, SH_ERR_ERR, ERR, N_("msg=\"Queue full, messages may get lost\" service=\"%s\"")},
314
315 { MSG_AUD_OPEN, SH_ERR_NOTICE, AUD, N_("interface=\"open\" path=\"%s\" oflag=\"%ld\" mode=\"%ld\" return_id=\"%ld\"")},
316 { MSG_AUD_DUP, SH_ERR_NOTICE, AUD, N_("interface=\"dup\" file_id=\"%ld\" return_id=\"%ld\"")},
317 { MSG_AUD_PIPE, SH_ERR_NOTICE, AUD, N_("interface=\"pipe\" rd_file_id=\"%ld\" wr_file_id=\"%ld\"")},
318 { MSG_AUD_FORK, SH_ERR_NOTICE, AUD, N_("interface=\"fork\" return_id=\"%ld\"")},
319 { MSG_AUD_EXIT, SH_ERR_NOTICE, AUD, N_("interface=\"exit\" exit_code=\"%ld\"")},
320 { MSG_AUD_SETUID, SH_ERR_NOTICE, AUD, N_("interface=\"setuid\" uid=\"%ld\"")},
321 { MSG_AUD_SETGID, SH_ERR_NOTICE, AUD, N_("interface=\"setgid\" gid=\"%ld\"")},
322 { MSG_AUD_UTIME, SH_ERR_NOTICE, AUD, N_("interface=\"utime\" path=\"%s\" atime=\"%ld\" mtime=\"%ld\"")},
323 { MSG_AUD_EXEC, SH_ERR_NOTICE, AUD, N_("interface=\"exec\" path=\"%s\" uid=\"%ld\" gid=\"%ld\"")},
324 { MSG_AUD_CHDIR, SH_ERR_NOTICE, AUD, N_("interface=\"chdir\" path=\"%s\"")},
325 { MSG_AUD_UNLINK, SH_ERR_NOTICE, AUD, N_("interface=\"unlink\" path=\"%s\"")},
326 { MSG_AUD_KILL, SH_ERR_NOTICE, AUD, N_("interface=\"kill\" pid=\"%ld\" sig=\"%ld\"")},
327
328 { MSG_ERR_OPEN, SH_ERR_ALL, ERR, N_("interface=\"open\" msg=\"%s\" path=\"%s\" oflag=\"%ld\" mode=\"%ld\" return_id=\"%ld\"")},
329 { MSG_ERR_DUP, SH_ERR_ALL, ERR, N_("interface=\"dup\" msg=\"%s\" file_id=\"%ld\" return_id=\"%ld\"")},
330 { MSG_ERR_PIPE, SH_ERR_ALL, ERR, N_("interface=\"pipe\" msg=\"%s\" rd_file_id=\"%ld\" wr_file_id=\"%ld\"")},
331 { MSG_ERR_FORK, SH_ERR_ALL, ERR, N_("interface=\"fork\" msg=\"%s\" return_id=\"%ld\"")},
332 { MSG_ERR_SETUID, SH_ERR_ALL, ERR, N_("interface=\"setuid\" msg=\"%s\" uid=\"%ld\"")},
333 { MSG_ERR_SETGID, SH_ERR_ALL, ERR, N_("interface=\"setgid\" msg=\"%s\" gid=\"%ld\"")},
334 { MSG_ERR_UTIME, SH_ERR_ALL, ERR, N_("interface=\"utime\" msg=\"%s\" path=\"%s\" atime=\"%ld\" mtime=\"%ld\"")},
335 { MSG_ERR_EXEC, SH_ERR_ALL, ERR, N_("interface=\"exec\" msg=\"%s\" path=\"%s\" uid=\"%ld\" gid=\"%ld\"")},
336 { MSG_ERR_CHDIR, SH_ERR_ALL, ERR, N_("interface=\"chdir\" msg=\"%s\" path=\"%s\"")},
337 { MSG_ERR_UNLINK, SH_ERR_ALL, ERR, N_("interface=\"unlink\" msg=\"%s\" path=\"%s\"")},
338 { MSG_ERR_KILL, SH_ERR_ALL, ERR, N_("interface=\"kill\" msg=\"%s\" pid=\"%ld\" sig=\"%ld\"")},
339
340 { MSG_ERR_SIGACT, SH_ERR_ALL, ERR, N_("interface=\"sigaction\" msg=\"%s\" sig=\"%ld\"")},
341 { MSG_ERR_CONNECT, SH_ERR_ALL, ERR, N_("interface=\"connect\" msg=\"%s\" socket_id=\"%ld\" port=\"%ld\" host=\"%s\"")},
342 { MSG_ERR_ACCEPT, SH_ERR_ALL, ERR, N_("interface=\"accept\" msg=\"%s\" socket_id=\"%ld\"")},
343 { MSG_ERR_LSTAT, SH_ERR_ALL, ERR, N_("interface=\"lstat\" msg=\"%s\" path=\"%s\"")},
344 { MSG_ERR_STAT, SH_ERR_ALL, ERR, N_("interface=\"stat\" msg=\"%s\" path=\"%s\"")},
345 { MSG_ERR_FSTAT, SH_ERR_ALL, ERR, N_("interface=\"fstat\" msg=\"%s\" file_id=\"%ld\"")},
346 { MSG_ERR_FCNTL, SH_ERR_ALL, ERR, N_("interface=\"fcntl\" msg=\"%s\" file_id=\"%ld\" cmd=\"%ld\" arg=\"%ld\"")},
347
348 { 0, 0, 0, NULL}
349};
350
351
352
353/********************************************************************
354 *
355 *
356 * NO XML
357 *
358 *
359 ********************************************************************/
360
361
362
363
364
365/* #ifdef (SH_USE_XML) */
366#else
367
368cat_entry msg_cat[] = {
369#if defined(SH_WITH_CLIENT) || defined(SH_STANDALONE)
370 { MSG_FI_CSUM, SH_ERR_ALL, FIL, N_("msg=<Checksum>, chk=<%s>, path=<%s>")},
371 { MSG_FI_DSUM, SH_ERR_INFO, FIL, N_("msg=<d: %3ld, -: %3ld, l: %3ld, |: %3ld, s: %3ld, c: %3ld, b: %3ld>")},
372 { MSG_FI_CHK, SH_ERR_INFO, FIL, N_("msg=<Checking>, path=<%s>")},
373#endif
374
375 { MSG_EXIT_ABORTS, SH_ERR_FATAL, PANIC, N_("msg=<PANIC %s>, program=<%s>, subroutine=<%s>")},
376 { MSG_START_SRV, SH_ERR_STAMP, START, N_("msg=<Server up, simultaneous connections: %d>, socket_id=<%d>")},
377
378 { MSG_EXIT_ABORT1, SH_ERR_FATAL, PANIC, N_("msg=<PANIC Error initializing the application>, program=<%s>")},
379 { MSG_EXIT_NORMAL, SH_ERR_FATAL, START, N_("msg=<EXIT>, program=<%s>, status=<%s>")},
380 { MSG_START_KEY_MAIL, SH_ERR_FATAL, LOGKEY, N_("msg=<LOGKEY>, program=<%s>, hash=<%s>\r\n-----BEGIN LOGKEY-----\r\n%s%s")},
381 { MSG_START_KEY, SH_ERR_FATAL, LOGKEY, N_("msg=<LOGKEY>, program=<%s>, hash=<%s>")},
382 { MSG_START_0H, SH_ERR_FATAL, START, N_("msg=<START>, program=<%s>, userid=<%ld>")},
383 { MSG_START_1H, SH_ERR_FATAL, START, N_("msg=<START>, program=<%s>, userid=<%ld>, path=<%s>, hash=<%s>")},
384 { MSG_START_2H, SH_ERR_FATAL, START, N_("msg=<START>, program=<%s>, userid=<%ld>, path=<%s>, hash=<%s>, path=<%s>, hash=<%s>")},
385 { MSG_START_GH, SH_ERR_FATAL, START, N_("msg=<START>, program=<%s>, userid=<%ld>, path=<%s>, key_uid=<%s>, key_id=<%s>")},
386 { MSG_START_GH2, SH_ERR_FATAL, START, N_("msg=<EXIT>, program=<%s>, userid=<%ld>, path=<%s>, key_uid=<%s>, key_id=<%s>, path=<%s>, key_uid=<%s>, key_id=<%s>")},
387 { MSG_SUSPEND, SH_ERR_STAMP, START, N_("msg=<SUSPEND> program=<%s>")},
388
389
390 { MSG_MLOCK, SH_ERR_WARN, RUN, N_("msg=<Using insecure memory>")},
391 { MSG_W_SIG, SH_ERR_WARN, RUN, N_("msg=<%s>, interface=<sigaction>, signal=<%ld>")},
392 { MSG_W_CHDIR, SH_ERR_ERR, RUN, N_("msg=<%s>, interface=<chdir>, path=<%s>")},
393
394 { MSG_MOD_FAIL, SH_ERR_WARN, RUN, N_("msg=<Module not initialized>, module=<%s>, return_code=<%ld>")},
395 { MSG_MOD_OK, SH_ERR_INFO, RUN, N_("msg=<Module initialized>, module=<%s>")},
396 { MSG_MOD_EXEC, SH_ERR_ERR, RUN, N_("msg=<Module execution error>, module=<%s>, return_code=<%ld>")},
397
398 { MSG_RECONF, SH_ERR_SEVERE, START, N_("msg=<Runtime configuration reloaded>")},
399 { MSG_CHECK_0, SH_ERR_WARN, RUN, N_("msg=<No files or directories defined for checking>")},
400 { MSG_CHECK_1, SH_ERR_STAMP, STAMP, N_("msg=<File check completed.>, time=<%ld>, kBps=<%f>")},
401 { MSG_STAMP, SH_ERR_STAMP, STAMP, N_("msg=<---- TIMESTAMP ---->")},
402
403 { MSG_D_START, SH_ERR_INFO, RUN, N_("msg=<Downloading configuration file>")},
404 { MSG_D_DSTART, SH_ERR_INFO, RUN, N_("msg=<Downloading database file>")},
405 { MSG_D_FAIL, SH_ERR_INFO, RUN, N_("msg=<No file from server, trying local file>")},
406
407
408#ifndef HAVE_URANDOM
409 { MSG_ENSTART, SH_ERR_ALL, RUN, N_("msg=<Found entropy source>, path=<%s>")},
410 { MSG_ENEXEC, SH_ERR_ALL, RUN, N_("msg=<Execute entropy source>, path=<%s>, rd_file_id=<%ld>")},
411 { MSG_ENFAIL, SH_ERR_ALL, RUN, N_("msg=<Could not execute entropy source>, path=<%s>")},
412 { MSG_ENTOUT, SH_ERR_ALL, RUN, N_("msg=<Timeout in entropy collector>, time=<%ld>")},
413 { MSG_ENCLOS, SH_ERR_ALL, RUN, N_("msg=<End of data, closing entropy source>, rd_file_id=<%ld>")},
414 { MSG_ENCLOS1, SH_ERR_ALL, RUN, N_("msg=<Close entropy source>, rd_file_id=<%ld>")},
415 { MSG_ENREAD, SH_ERR_ALL, RUN, N_("msg=<Data from entropy source>, rd_file_id=<%ld>, bytes=<%ld>")},
416#endif
417
418#ifdef SH_USE_SUIDCHK
419 { MSG_SUID_POLICY, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [SuidCheck] %s>, path=<%s>, %s") },
420 { MSG_SUID_FOUND, SH_ERR_INFO, RUN, N_("msg=<Found suid/sgid file> path=<%s>") },
421 { MSG_SUID_SUMMARY,SH_ERR_INFO, RUN, N_("msg=<Checked for SUID programs: %ld files, %ld seconds>") },
422 { MSG_SUID_QREPORT,SH_ERR_SEVERE, EVENT, N_("msg=<Quarantine report: %s>, path=<%s>") },
423 { MSG_SUID_ERROR, SH_ERR_SEVERE, EVENT, N_("msg=<Quarantine error: %s>") },
424#endif
425
426#ifdef SH_USE_KERN
[183]427 { MSG_KERN_POLICY, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Kernel] BSD syscall table: new: %#lx old: %#lx>, syscall=<%03d %s>") },
428 { MSG_KERN_POL_CO, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Kernel] BSD syscall code: new: %#x,%#x old: %#x,%#x>, syscall=<%03d %s>") },
[1]429
430 { MSG_KERN_SYSCALL,SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Kernel] SYSCALL modified> syscall=<%03d %s>, %s") },
431 { MSG_KERN_PROC, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Kernel] PROC modified proc filesystem: %s>") },
432 { MSG_KERN_IDT, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Kernel] IDT interrupt %03d: new: 0x%-8.8lx %-9s %3d %c old: 0x%-8.8lx %-9s %3d %c>, %s") },
433 { MSG_KERN_GATE, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Kernel SYS_GATE code: new: %#x,%#x old: %#x,%#x> syscall=<%03d %s>, %s") },
434
435#endif
436
437#ifdef SH_USE_UTMP
438 { MSG_UT_CHECK, SH_ERR_INFO, RUN, N_("msg=<Checking logins>")},
439
440 { MSG_UT_LG1X, SH_ERR_INFO, EVENT, N_("msg=<Login>, name=<%s>, tty=<%s>, host=<%s>, ip=<%s>, time=<%s>, status=<%d>")},
441 { MSG_UT_LG1A, SH_ERR_INFO, EVENT, N_("msg=<Login>, name=<%s>, tty=<%s>, host=<%s>, time=<%s>, status=<%d>")},
442 { MSG_UT_LG1B, SH_ERR_INFO, EVENT, N_("msg=<Login>, name=<%s>, tty=<%s>, time=<%s>, status=<%d>")},
443
444 { MSG_UT_LG2X, SH_ERR_INFO, EVENT, N_("msg=<Multiple login>, name=<%s>, tty=<%s>, host=<%s>, ip=<%s>, time=<%s>, status=<%d>")},
445 { MSG_UT_LG2A, SH_ERR_INFO, EVENT, N_("msg=<Multiple login>, name=<%s>, tty=<%s>, host=<%s>, time=<%s>, status=<%d>")},
446 { MSG_UT_LG2B, SH_ERR_INFO, EVENT, N_("msg=<Multiple login>, name=<%s>, tty=<%s>, time=<%s>, status=<%d>")},
447
448 { MSG_UT_LG3X, SH_ERR_INFO, EVENT, N_("msg=<Logout>, name=<%s>, tty=<%s>, host=<%s>, ip=<%s>, time=<%s>, status=<%d>")},
449 { MSG_UT_LG3A, SH_ERR_INFO, EVENT, N_("msg=<Logout>, name=<%s>, tty=<%s>, host=<%s>, time=<%s>, status=<%d>")},
450 { MSG_UT_LG3B, SH_ERR_INFO, EVENT, N_("msg=<Logout>, name=<%s>, tty=<%s>, time=<%s>, status=<%d>")},
451 { MSG_UT_LG3C, SH_ERR_INFO, EVENT, N_("msg=<Logout>, tty=<%s>, time=<%s>")},
452 { MSG_UT_ROT, SH_ERR_WARN, RUN, N_("msg=<Logfile size decreased>, path=<%s>")},
453
454#endif
455
[68]456#ifdef SH_USE_PROCESSCHECK
[144]457 { MSG_PCK_CHECK, SH_ERR_INFO, RUN, N_("msg=<Checking processes in pid interval [%ld,%ld]>")},
[68]458 { MSG_PCK_OK, SH_ERR_ALL, RUN, N_("msg=<PID %ld found with tests %s>")},
[78]459 { MSG_PCK_P_HIDDEN,SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Process] Hidden pid: %ld tests: %s> path=<%s> userid=<%s>")},
[68]460 { MSG_PCK_HIDDEN, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Process] Hidden pid: %ld tests: %s>")},
461 { MSG_PCK_FAKE, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Process] Fake pid: %ld tests: %s>")},
462 { MSG_PCK_MISS, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Process] Missing: %s>")},
463#endif
464
465#ifdef SH_USE_PORTCHECK
[169]466 { MSG_PORT_MISS, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [ServiceMissing] %s>")},
[206]467 { MSG_PORT_NEW, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [ServiceNew] %s> path=<%s> pid=<%lu> userid=<%s>")},
468 { MSG_PORT_RESTART,SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [ServiceRestarted] %s> path=<%s> pid=<%lu> userid=<%s>")},
469 { MSG_PORT_NEWPORT,SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [ServicePortSwitch] %s> path=<%s> pid=<%lu> userid=<%s>")},
[68]470#endif
471
[1]472#ifdef SH_USE_MOUNTS
473 { MSG_MNT_CHECK, SH_ERR_INFO, RUN, N_("msg=<Checking mounts>")},
474 { MSG_MNT_MEMLIST, SH_ERR_ERR, RUN, N_("msg=<Cannot read mount list from memory>")},
[183]475 { MSG_MNT_MNTMISS, SH_ERR_WARN, EVENT, N_("msg=<POLICY [Mounts] Mount missing>, path=<%s>")},
476 { MSG_MNT_OPTMISS, SH_ERR_WARN, EVENT, N_("msg=<POLICY [Mounts] Mount option missing>, path=<%s>, option=<%s>")},
[1]477#endif
478
479#ifdef SH_USE_USERFILES
480 { MSG_USERFILES_SUMMARY,SH_ERR_INFO, RUN, N_("msg=<Checked for users files>") },
481#endif
482
[183]483#ifdef USE_LOGFILE_MONITOR
484 { MSG_LOGMON_CHKS, SH_ERR_INFO, RUN, N_("msg=<Checking logfile %s>") },
485 { MSG_LOGMON_CHKE, SH_ERR_INFO, RUN, N_("msg=<Finished logfile %s, %lu new records processed>") },
486 { MSG_LOGMON_MISS, SH_ERR_ERR, RUN, N_("msg=<Missing logfile %s>") },
487 { MSG_LOGMON_EOPEN,SH_ERR_ERR, RUN, N_("msg=<Cannot open logfile %s>") },
488 { MSG_LOGMON_EREAD,SH_ERR_ERR, RUN, N_("msg=<Error while reading logfile %s>") },
489 { MSG_LOGMON_REP, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Logfile] %s> time=<%s> host=<%s> path=<%s>") },
490 { MSG_LOGMON_SUM, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Logfile] %s> host=<%s> path=<%s>") },
[260]491 { MSG_LOGMON_COR, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Logfile] Correlated events %s>") },
[183]492#endif
493
[1]494#if defined(SH_WITH_CLIENT) || defined(SH_STANDALONE)
495
496 { MSG_FI_TOOLATE, SH_ERR_ERR, FIL, N_("msg=<Large lstat/open overhead (%ld sec)>, path=<%s>")},
497
498#if 0
499 { MSG_FI_CSUM, SH_ERR_ALL, FIL, N_("msg=<Checksum>, chk=<%s>, path=<%s>")},
500 { MSG_FI_DSUM, SH_ERR_INFO, FIL, N_("msg=<d: %3ld, -: %3ld, l: %3ld, |: %3ld, s: %3ld, c: %3ld, b: %3ld>")},
501 { MSG_FI_CHK, SH_ERR_INFO, FIL, N_("msg=<Checking>, path=<%s>")},
502#endif
503
504 { MSG_FI_NULL, SH_ERR_ERR, FIL, N_("msg=<Path is NULL>")},
505 { MSG_FI_FAIL, SH_ERR_ERR, FIL, N_("msg=<Check failed>, path=<%s>")},
506 { MSG_FI_GLOB, SH_ERR_ERR, FIL, N_("msg=<%s>, interface=<glob>, path=<%s>")},
507 { MSG_FI_COLL, SH_ERR_WARN, FIL, N_("msg=<Writeable file with timestamps of parent directory fixed>, dir=<%s>, path=<%s>")},
508 { MSG_FI_DOUBLE, SH_ERR_WARN, FIL, N_("msg=<File or directory appears twice in configuration>, path=<%s>")},
509 { MSG_FI_2LONG, SH_ERR_ERR, FIL, N_("msg=<Filename too long>, path=<%s>")},
510 { MSG_FI_2LONG2, SH_ERR_ERR, FIL, N_("msg=<Filename too long>, path=<%s/%s>")},
511 { MSG_FI_NOPATH, SH_ERR_ERR, FIL, N_("msg=<Filename not an absolute path>, path=<%s>")},
512 { MSG_FI_DLNK, SH_ERR_INFO, FIL, N_("msg=<Dangling link>, path=<%s>, linked_path=<%s>")},
513 { MSG_FI_RDLNK, SH_ERR_ERR, FIL, N_("msg=<%s>, interface=<readlink>, path=<%s>")},
514 { MSG_FI_NOGRP, SH_ERR_ERR, FIL, N_("msg=<No such group>, interface=<getgrgid>, group=<%ld>, path=<%s>")},
515 { MSG_FI_NOUSR, SH_ERR_ERR, FIL, N_("msg=<No such user>, interface=<getpwuid>, userid=<%ld>, path=<%s>")},
[192]516 { MSG_FI_STAT, SH_ERR_ERR, FIL, N_("interface=<%s>, msg=<%s>, userid=<%ld>, path=<%s>")},
[1]517 { MSG_FI_OBSC, SH_ERR_ERR, FIL, N_("msg=<Weird filename>, path=<%s>")},
518 { MSG_FI_OBSC2, SH_ERR_ERR, FIL, N_("msg=<Weird filename>, path=<%s/%s>")},
519 { MSG_FI_LIST, SH_ERR_ALL, FIL, N_("msg=<%10s %2d %8s %8s %14ld %21s %s>")},
520 { MSG_FI_LLNK, SH_ERR_ALL, FIL, N_("msg=< >>> %10s %s>")},
521 { MSG_FI_MISS, SH_ERR_ERR, EVENT, N_("msg=<POLICY MISSING>, path=<%s>")},
522 { MSG_FI_MISS2, SH_ERR_ERR, EVENT, N_("msg=<POLICY MISSING>, path=<%s>, %s")},
523 { MSG_FI_ADD, SH_ERR_ERR, EVENT, N_("msg=<POLICY ADDED>, path=<%s>")},
524 { MSG_FI_ADD2, SH_ERR_ERR, EVENT, N_("msg=<POLICY ADDED>, path=<%s>, %s")},
525 { MSG_FI_CHAN, SH_ERR_ERR, EVENT, N_("msg=<POLICY %s %s>, path=<%s>, %s")},
526 { MSG_FI_NODIR, SH_ERR_ERR, EVENT, N_("msg=<POLICY NODIRECTORY>, path=<%s>")},
527 { MSG_FI_DBEX, SH_ERR_WARN, FIL, N_("msg=<Signature database exists>, path=<%s>")},
528#endif
529
530 { MSG_TCP_NETRP, SH_ERR_ERR, TCP, N_("msg=<Connection error: %s>, port=<%ld>, subroutine=<%s>")},
531
532#ifndef SH_STANDALONE
533#ifdef INET_SYSLOG
534 { MSG_INET_SYSLOG, SH_ERR_INET, TCP, N_("ip=<%s> facility=<%s> priority=<%s> syslog_msg=<%s>")},
535 { MSG_ERR_SYSLOG, SH_ERR_ERR, TCP, N_("msg=<syslog socket: %s>, ip=<%s>")},
536#endif
537 { MSG_TCP_MISMATCH,SH_ERR_ERR, TCP, N_("msg=<Protocol mismatch>")},
538 { MSG_TCP_MISENC, SH_ERR_ERR, TCP, N_("msg=<Encryption mismatch in %s: server: %s client: %s>")},
539 { MSG_TCP_NONAME, SH_ERR_ERR, TCP, N_("msg=<No server name known>")},
540 { MSG_TCP_UNEXP, SH_ERR_ERR, TCP, N_("msg=<Unexpected reply>")},
541 { MSG_TCP_EFIL, SH_ERR_ERR, TCP, N_("msg=<Could not open temporary file>")},
542 { MSG_TCP_NOCONF, SH_ERR_ERR, TCP, N_("msg=<Message delivery not confirmed>")},
543 { MSG_TCP_NOAUTH, SH_ERR_ERR, TCP, N_("msg=<Session key negotiation failed>")},
544 { MSG_TCP_CONF, SH_ERR_ALL, TCP, N_("msg=<Message delivery confirmed>")},
545 { MSG_TCP_AUTH, SH_ERR_INFO, TCP, N_("msg=<Session key negotiated>")},
546 { MSG_TCP_FOK, SH_ERR_INFO, TCP, N_("msg=<File download completed>")},
547 { MSG_TCP_FBAD, SH_ERR_ERR, TCP, N_("msg=<File download failed>")},
548 { MSG_TCP_ECONN, SH_ERR_ERR, TCP, N_("msg=<Connection error: %s>")},
549 { MSG_TCP_EZERO, SH_ERR_ERR, TCP, N_("msg=<Illegal zero reply>")},
550 { MSG_TCP_EBGN, SH_ERR_ERR, TCP, N_("msg=<Error in big integer library>")},
551
552 { MSG_TCP_CREG, SH_ERR_ALL, TCP, N_("msg=<Registered %s, salt %s, verifier %s>")},
553 { MSG_TCP_FAUTH, SH_ERR_INFO, TCP, N_("msg=<Force authentication>, client=<%s>")},
554
555 { MSG_TCP_RESCLT, SH_ERR_SEVERE, TCP, N_("msg=<Cannot resolve client name> host=<%s>")},
556 { MSG_TCP_RESPEER, SH_ERR_SEVERE, TCP, N_("msg=<Cannot resolve socket peer IP for client> host=<%s> peer=<%s>")},
557 { MSG_TCP_LOOKERS, SH_ERR_SEVERE, TCP, N_("msg=<Reverse lookup of socket peer failed> host=<%s> peer=<%s> obj=<%s>")},
558 { MSG_TCP_LOOKUP, SH_ERR_SEVERE, TCP, N_("msg=<No socket peer alias matches client name> host=<%s> peer=<%s>")},
559
560 { MSG_TCP_TIMOUT, SH_ERR_SEVERE, TCP, N_("msg=<Connection timeout>, client=<%s>")},
561 { MSG_TCP_TIMEXC, SH_ERR_SEVERE, TCP, N_("msg=<Time limit exceeded>, client=<%s>")},
562 { MSG_TCP_NOCLT, SH_ERR_SEVERE, TCP, N_("msg=<Hostname is NULL>")},
563 { MSG_TCP_BADCONN, SH_ERR_SEVERE, TCP, N_("msg=<Invalid connection attempt: %s>, client=<%s>")},
564 { MSG_TCP_FFILE , SH_ERR_SEVERE, TCP, N_("msg=<Unknown file request>, client=<%s>, path=<%s>")},
565 { MSG_TCP_NFILE , SH_ERR_SEVERE, TCP, N_("msg=<Requested file not found>, client=<%s>, path=<%s>")},
566 { MSG_TCP_FINV , SH_ERR_SEVERE, TCP, N_("msg=<Invalid request (%d) in pass %d>, client=<%s>, request=<%c%03o%c%03o%c%03o%c%03o>")},
567 { MSG_TCP_OKFILE, SH_ERR_INFO, TCP, N_("msg=<File transfer completed>, client=<%s>")},
568 { MSG_TCP_OKMSG, SH_ERR_ALL, TCP, N_("msg=<Message transfer completed>, client=<%s>")},
569 { MSG_TCP_MSG, SH_ERR_INET, TCP, N_("client=<%s>, msg=<%s>")},
570 { MSG_TCP_NEW, SH_ERR_NOTICE, TCP, N_("msg=<NEW CLIENT>, client=<%s>")},
571 { MSG_TCP_ILL, SH_ERR_SEVERE, TCP, N_("msg=<Restart without prior exit>, client=<%s>")},
572 { MSG_TCP_SYNC, SH_ERR_SEVERE, TCP, N_("msg=<Out of sync>, client=<%s>")},
[113]573 { MSG_TCP_RESET, SH_ERR_NOTICE, TCP, N_("msg=<Connection reset by peer>, client=<%s>")},
[1]574 { MSG_TCP_CNEW, SH_ERR_INFO, TCP, N_("msg=<New connection>, socket_id=<%d>")},
575 { MSG_E_HTML, SH_ERR_ERR, ERR, N_("msg=<Error writing HTML status>")},
576#endif
577
578
579 { MSG_E_AUTH, SH_ERR_FATAL, PANIC, N_("msg=<PANIC - File modified>, path=<%s>")},
580 { MSG_ACCESS, SH_ERR_FATAL, PANIC, N_("msg=<PANIC - Access violation>, userid=<%ld>, path=<%s>")},
581 { MSG_TRUST, SH_ERR_FATAL, PANIC, N_("msg=<PANIC - Untrusted path>, userid=<%ld>, path=<%s>")},
582 { MSG_NOACCESS, SH_ERR_FATAL, PANIC, N_("msg=<PANIC - File not accessible>, userid=<%ld>, path=<%s>")},
583 { MSG_P_NODATA, SH_ERR_FATAL, PANIC, N_("msg=<PANIC - No data in file>, path=<%s>")},
584
585
586#ifndef MEM_DEBUG
587 { MSG_E_MNULL, SH_ERR_ERR, ERR, N_("msg=<Dereferenced NULL pointer>")},
588 { MSG_E_MMEM, SH_ERR_ERR, ERR, N_("msg=<Out of memory>")},
589#else
590 { MSG_MSTAMP, SH_ERR_STAMP, STAMP, N_("msg=<Memory used: max.=%lu, current=%lu>")},
591 { MSG_MSTAMP2, SH_ERR_STAMP, STAMP, N_("msg=<Blocks: %d allocated, %d freed, %d maximum>")},
592 { MSG_E_MNULL, SH_ERR_ERR, ERR, N_("msg=<Dereferenced NULL pointer>, source_file=<%s>, source_line=<%d>")},
593 { MSG_E_MMEM, SH_ERR_ERR, ERR, N_("msg=<Out of memory>, source_file=<%s>, source_line=<%d>")},
594 { MSG_E_MREC, SH_ERR_ERR, ERR, N_("msg=<Free() on unrecorded block>, source_file=<%s>, source_line=<%d>")},
595 { MSG_E_MOVER, SH_ERR_ERR, ERR, N_("msg=<Memory overrun on block allocated in %s, line %d>, source_file=<%s>, source_line=<%d>")},
596 { MSG_E_MUNDER, SH_ERR_ERR, ERR, N_("msg=<Memory underrun on block allocated in %s, line %d>, source_file=<%s>, source_line=<%d>")},
597 { MSG_E_NOTFREE, SH_ERR_ERR, ERR, N_("msg=<Not deallocated: size %14ld>, source_file=<%19s>, source_line=<%d>")},
598#endif
599
600 { MSG_E_TRUST, SH_ERR_ERR, ERR, N_("msg=<Untrusted path>, userid=<%ld>, path=<%s>")},
601 { MSG_E_HASH, SH_ERR_ERR, ERR, N_("msg=<Incorrect checksum>, path=<%s>")},
602 { MSG_E_ACCESS, SH_ERR_ERR, ERR, N_("msg=<File not accessible>, userid=<%ld>, path=<%s>")},
[192]603 { MSG_E_READ, SH_ERR_ERR, ERR, N_("msg=<Not accessible or not a regular file (%s / %s)>, path=<%s>")},
[185]604 { MSG_E_NOTREG, SH_ERR_ERR, ERR, N_("msg=<Not a regular file>, path=<%s>")},
[1]605 { MSG_E_TIMEOUT, SH_ERR_ERR, ERR, N_("msg=<Timeout (%d sec) while checksumming file>, path=<%s>")},
[170]606 { MSG_NODEV, SH_ERR_ERR, ERR, N_("msg=<Device not available or timeout during read attempt>, userid=<%ld>, path=<%s>")},
[1]607 { MSG_LOCKED, SH_ERR_ERR, ERR, N_("msg=<File lock error>, userid=<%ld>, path=<%s>, obj=<%s>")},
608 { MSG_PIDFILE, SH_ERR_ERR, ERR, N_("msg=<Could not write PID file>, userid=<%ld>, path=<%s>")},
609 { MSG_NOEXEC, SH_ERR_ERR, ERR, N_("msg=<Could not execute file>, userid=<%ld>, path=<%s>")},
610
611 { MSG_ES_ENT, SH_ERR_ERR, ERR, N_("msg=<No entropy collected>, subroutine=<%s>")},
612 { MSG_ES_KEY1, SH_ERR_ERR, ERR, N_("msg=<Insecure key generation>, subroutine=<%s>")},
613 { MSG_ES_KEY2, SH_ERR_ERR, ERR, N_("msg=<Error copying key>, subroutine=<%s>")},
614 { MSG_E_GPG, SH_ERR_ERR, ERR, N_("msg=<Compiled-in gpg checksum does not match: need %s got %s>")},
615 { MSG_E_GPG_FP, SH_ERR_ERR, ERR, N_("msg=<Compiled-in fingerprint modified: one %s two %s>")},
616 { MSG_E_GPG_CHK, SH_ERR_ERR, ERR, N_("msg=<Compiled-in checksum modified: one %s two %s>")},
617 { MSG_E_SUBGEN, SH_ERR_ERR, ERR, N_("msg=<%s>, subroutine=<%s>")},
618 { MSG_E_SUBGPATH, SH_ERR_ERR, ERR, N_("msg=<%s>, subroutine=<%s>, path=<%s>")},
619 { MSG_E_UNLNK, SH_ERR_ERR, FIL, N_("msg=<%s>, interface=<unlink>, path=<%s>")},
620 { MSG_E_REGEX, SH_ERR_ERR, ERR, N_("msg=<%s>, interface=<regcomp>, regexp=<%s>")},
621 { MSG_E_OPENDIR, SH_ERR_ERR, FIL, N_("msg=<%s>, interface=<opendir>, path=<%s>")},
622 { MSG_E_TRUST1, SH_ERR_ERR, ERR, N_("msg=<%s>, subroutine=<trustfile>, path=<%s>")},
623 { MSG_E_TRUST2, SH_ERR_ERR, ERR, N_("msg=<%s>, subroutine=<trustfile>, path=<%s>, obj=<%s>")},
624 { MSG_E_PWNULL, SH_ERR_ERR, ERR, N_("msg=<Empty password file entry: %s>, subroutine=<%s>, userid=<%ld>, obj=<%s>")},
625 { MSG_E_PWLONG, SH_ERR_ERR, ERR, N_("msg=<Password file entry too long>, subroutine=<%s>, userid=<%ld>, obj=<%s>")},
626 { MSG_E_GRNULL, SH_ERR_ERR, ERR, N_("msg=<Empty groups file entry: %s>, subroutine=<%s>, group=<%ld>, obj=<%s>")},
627
628 { MSG_E_NET, SH_ERR_ERR, ENET, N_("msg=<%s>, subroutine=<%s>, service=<%s>, host=<%s>")},
629 { MSG_E_NETST, SH_ERR_ERR, ENET, N_("msg=<Invalid connection state>, expect=<%4s>, received=<%4s>")},
630 { MSG_E_NETST1, SH_ERR_ERR, ENET, N_("msg=<Invalid connection state>, expect=<%4s>, received=<%4s>, host=<%s>")},
631 { MSG_E_NLOST, SH_ERR_ERR, ENET, N_("msg=<Connection failure>, service=<%s>, obj=<%s>")},
632 { MSG_E_NEST, SH_ERR_ERR, ENET, N_("msg=<Connection reestablished>, service=<%s>, obj=<%s>")},
633
634 { MSG_EINVALHEAD, SH_ERR_WARN, EINPUT,N_("msg=<Unrecognized section heading in line %ld of configuration file>")},
635 { MSG_EINVALCONF, SH_ERR_WARN, EINPUT,N_("msg=<Invalid line %ld in configuration file: incorrect format, unrecognized option, or missing section header>")},
636 { MSG_EINVALS, SH_ERR_WARN, EINPUT,N_("msg=<Invalid input>, option=<%s>, obj=<%s>")},
637 { MSG_EINVALL, SH_ERR_WARN, EINPUT,N_("msg=<Invalid input>, option=<%s>, obj=<%ld>")},
638 { MSG_EINVALD, SH_ERR_WARN, EINPUT,N_("msg=<Configuration file: Unmatched @end>, option=<%s>, obj=<%ld>")},
639 { MSG_EINVALDD, SH_ERR_WARN, EINPUT,N_("msg=<Configuration file: Missing @end>, option=<%s>, obj=<%ld>")},
640
641 { MSG_SRV_FAIL, SH_ERR_ERR, ERR, N_("msg=<Service failure>, service=<%s>, obj=<%s>")},
642 { MSG_QUEUE_FULL, SH_ERR_ERR, ERR, N_("msg=<Queue full, messages may get lost> service=<%s>")},
643
644 { MSG_AUD_OPEN, SH_ERR_NOTICE, AUD, N_("interface=<open>, pathname=<%s>, oflag=<%ld>, mode=<%ld>, return_id=<%ld>")},
645 { MSG_AUD_DUP, SH_ERR_NOTICE, AUD, N_("interface=<dup>, file_id=<%ld>, return_id=<%ld>")},
646 { MSG_AUD_PIPE, SH_ERR_NOTICE, AUD, N_("interface=<pipe>, rd_file_id=<%ld>, wr_file_id=<%ld>")},
647 { MSG_AUD_FORK, SH_ERR_NOTICE, AUD, N_("interface=<fork>, return_id=<%ld>")},
648 { MSG_AUD_EXIT, SH_ERR_NOTICE, AUD, N_("interface=<exit>, exit_code=<%ld>")},
649 { MSG_AUD_SETUID, SH_ERR_NOTICE, AUD, N_("interface=<setuid>, uid=<%ld>")},
650 { MSG_AUD_SETGID, SH_ERR_NOTICE, AUD, N_("interface=<setgid>, gid=<%ld>")},
651 { MSG_AUD_UTIME, SH_ERR_NOTICE, AUD, N_("interface=<utime>, pathname=<%s>, atime=<%ld>, mtime=<%ld>")},
652 { MSG_AUD_EXEC, SH_ERR_NOTICE, AUD, N_("interface=<exec>, pathname=<%s>, uid=<%ld>, gid=<%ld>")},
653 { MSG_AUD_CHDIR, SH_ERR_NOTICE, AUD, N_("interface=<chdir>, pathname=<%s>")},
654 { MSG_AUD_UNLINK, SH_ERR_NOTICE, AUD, N_("interface=<unlink>, pathname=<%s>")},
655 { MSG_AUD_KILL, SH_ERR_NOTICE, AUD, N_("interface=<kill>, pid=<%ld>, sig=<%ld>")},
656
657 { MSG_ERR_OPEN, SH_ERR_ALL, ERR, N_("interface=<open>, msg=<%s>, path=<%s>, oflag=<%ld>, mode=<%ld>, return_id=<%ld>")},
658 { MSG_ERR_DUP, SH_ERR_ALL, ERR, N_("interface=<dup>, msg=<%s>, file_id=<%ld>, return_id=<%ld>")},
659 { MSG_ERR_PIPE, SH_ERR_ALL, ERR, N_("interface=<pipe>, msg=<%s>, rd_file_id=<%ld>, wr_file_id=<%ld>")},
660 { MSG_ERR_FORK, SH_ERR_ALL, ERR, N_("interface=<fork>, msg=<%s>, return_id=<%ld>")},
661 { MSG_ERR_SETUID, SH_ERR_ALL, ERR, N_("interface=<setuid>, msg=<%s>, uid=<%ld>")},
662 { MSG_ERR_SETGID, SH_ERR_ALL, ERR, N_("interface=<setgid>, msg=<%s>, gid=<%ld>")},
663 { MSG_ERR_UTIME, SH_ERR_ALL, ERR, N_("interface=<utime>, msg=<%s>, path=<%s>, atime=<%ld>, mtime=<%ld>")},
664 { MSG_ERR_EXEC, SH_ERR_ALL, ERR, N_("interface=<exec>, msg=<%s>, path=<%s>, uid=<%ld>, gid=<%ld>")},
665 { MSG_ERR_CHDIR, SH_ERR_ALL, ERR, N_("interface=<chdir>, msg=<%s>, path=<%s>")},
666 { MSG_ERR_UNLINK, SH_ERR_ALL, ERR, N_("interface=<unlink>, msg=<%s>, path=<%s>")},
667 { MSG_ERR_KILL, SH_ERR_ALL, ERR, N_("interface=<kill>, msg=<%s>, pid=<%ld>, sig=<%ld>")},
668
669 { MSG_ERR_SIGACT, SH_ERR_ALL, ERR, N_("interface=<sigaction>, msg=<%s>, sig=<%ld>")},
670 { MSG_ERR_CONNECT, SH_ERR_ALL, ERR, N_("interface=<connect>, msg=<%s>, socket_id=<%ld>, port=<%ld>, host=<%s>")},
671 { MSG_ERR_ACCEPT, SH_ERR_ALL, ERR, N_("interface=<accept>, msg=<%s>, socket_id=<%ld>")},
672 { MSG_ERR_LSTAT, SH_ERR_ALL, ERR, N_("interface=<lstat>, msg=<%s>, path=<%s>")},
673 { MSG_ERR_STAT, SH_ERR_ALL, ERR, N_("interface=<stat>, msg=<%s>, path=<%s>")},
674 { MSG_ERR_FSTAT, SH_ERR_ALL, ERR, N_("interface=<fstat>, msg=<%s>, file_id=<%ld>")},
675 { MSG_ERR_FCNTL, SH_ERR_ALL, ERR, N_("interface=<fcntl>, msg=<%s>, file_id=<%ld>, cmd=<%ld>, arg=<%ld>")},
676
677 { 0, 0, 0, NULL}
678};
679
680/* #ifdef (SH_USE_XML) */
681#endif
682
683
684
685
686
Note: See TracBrowser for help on using the repository browser.