source: trunk/src/sh_cat.c@ 273

Last change on this file since 273 was 265, checked in by katerina, 15 years ago

Enhance logfile monitoring (tickets #183, #184, #185).
File size: 49.3 KB
RevLine 
[1]1#include "config_xor.h"
2
3#include "samhain.h"
4#include "sh_error.h"
5
6#include "sh_cat.h"
7
8/*@-nullassign@*/
9
[170]10const char * class_cat[] = {
[1]11 N_("AUD"), /* 0 */
12 N_("PANIC"), /* 1 */
13 N_("RUN_OLD"), /* 2 */
14 N_("FIL_OLD"), /* 3 */
15 N_("TCP"), /* 4 */
16 N_("ERR"), /* 5 */
17 N_("STAMP"), /* 6 */
18 N_("ENET"), /* 7 */
19 N_("EINPUT"), /* 8 */
20
21 /* new simplified classes */
22 N_("EVENT"), /* 9 */
23 N_("START"), /* 10 */
24 N_("LOGKEY"), /* 11 */
25 N_("OTHER"), /* 12 */
26 /* end simplified classes */
27
28 N_("RUN"), /* 13 */
29 N_("FIL"), /* 14 */
30 N_("ERROR"), /* 15 */
31 NULL
32};
33
34
35#ifdef SH_USE_XML
36
37cat_entry msg_cat[] = {
38
39#if defined(SH_WITH_CLIENT) || defined(SH_STANDALONE)
40 { MSG_FI_CSUM, SH_ERR_ALL, FIL, N_("msg=\"Checksum\" chk=\"%s\" path=\"%s\"")},
41 { MSG_FI_DSUM, SH_ERR_INFO, FIL, N_("msg=\"d: %3ld, -: %3ld, l: %3ld, |: %3ld, s: %3ld, c: %3ld, b: %3ld\"")},
42 { MSG_FI_CHK, SH_ERR_INFO, FIL, N_("msg=\"Checking\" path=\"%s\"")},
43#endif
44
45 { MSG_EXIT_ABORTS, SH_ERR_FATAL, PANIC, N_("msg=\"PANIC %s\" program=\"%s\" subroutine=\"%s\"")},
46 { MSG_START_SRV, SH_ERR_STAMP, START, N_("msg=\"Server up, simultaneous connections: %d\" socket_id=\"%d\"")},
47
48 { MSG_EXIT_ABORT1, SH_ERR_FATAL, PANIC, N_("msg=\"PANIC Error initializing the application\" program=\"%s\"")},
49 { MSG_EXIT_NORMAL, SH_ERR_FATAL, START, N_("msg=\"EXIT\" program=\"%s\" status=\"%s\"")},
50 { MSG_START_KEY_MAIL, SH_ERR_FATAL, LOGKEY, N_("msg=\"LOGKEY\" program=\"%s\" hash=\"%s\"\r\n-----BEGIN LOGKEY-----\r\n%s%s")},
51 { MSG_START_KEY, SH_ERR_FATAL, LOGKEY, N_("msg=\"LOGKEY\" program=\"%s\" hash=\"%s\"")},
52 { MSG_START_0H, SH_ERR_FATAL, START, N_("msg=\"START\" program=\"%s\" userid=\"%ld\"")},
53 { MSG_START_1H, SH_ERR_FATAL, START, N_("msg=\"START\" program=\"%s\" userid=\"%ld\" path=\"%s\" hash=\"%s\"")},
54 { MSG_START_2H, SH_ERR_FATAL, START, N_("msg=\"START\" program=\"%s\" userid=\"%ld\" path=\"%s\" hash=\"%s\" path_data=\"%s\" hash_data=\"%s\"")},
55 { MSG_START_GH, SH_ERR_FATAL, START, N_("msg=\"START\" program=\"%s\" userid=\"%ld\" path=\"%s\" key_uid=\"%s\" key_id=\"%s\"")},
56 { MSG_START_GH2, SH_ERR_FATAL, START, N_("msg=\"EXIT\" program=\"%s\" userid=\"%ld\" path=\"%s\" key_uid=\"%s\" key_id=\"%s\" path_data=\"%s\" key_uid_data=\"%s\" key_id_data=\"%s\"")},
57 { MSG_SUSPEND, SH_ERR_STAMP, START, N_("msg=\"SUSPEND\" program=\"%s\"")},
58
59
60 { MSG_MLOCK, SH_ERR_WARN, RUN, N_("msg=\"Using insecure memory\"")},
61 { MSG_W_SIG, SH_ERR_WARN, RUN, N_("interface=\"sigaction\" msg=\"%s\" sig=\"%ld\"")},
62 { MSG_W_CHDIR, SH_ERR_ERR, RUN, N_("interface=\"chdir\" msg=\"%s\" path=\"%s\"")},
63
64 { MSG_MOD_FAIL, SH_ERR_WARN, RUN, N_("msg=\"Module not initialized\" module=\"%s\" return_code=\"%ld\"")},
65 { MSG_MOD_OK, SH_ERR_INFO, RUN, N_("msg=\"Module initialized\" module=\"%s\"")},
66 { MSG_MOD_EXEC, SH_ERR_ERR, RUN, N_("msg=\"Module execution error\" module=\"%s\" return_code=\"%ld\"")},
67
68 { MSG_RECONF, SH_ERR_SEVERE, START, N_("msg=\"Runtime configuration reloaded\"")},
69
70 { MSG_CHECK_0, SH_ERR_WARN, RUN, N_("msg=\"No files or directories defined for checking\"")},
71 { MSG_CHECK_1, SH_ERR_STAMP, STAMP, N_("msg=\"File check completed.\" time=\"%ld\" kBps=\"%f\"")},
72 { MSG_STAMP, SH_ERR_STAMP, STAMP, N_("msg=\"---- TIMESTAMP ----\"")},
73
74 { MSG_D_START, SH_ERR_INFO, RUN, N_("msg=\"Downloading configuration file\"")},
75 { MSG_D_DSTART, SH_ERR_INFO, RUN, N_("msg=\"Downloading database file\"")},
76 { MSG_D_FAIL, SH_ERR_INFO, RUN, N_("msg=\"No file from server, trying local file\"")},
77
78
79#ifndef HAVE_URANDOM
80 { MSG_ENSTART, SH_ERR_ALL, RUN, N_("msg=\"Found entropy source\" path=\"%s\"")},
81 { MSG_ENEXEC, SH_ERR_ALL, RUN, N_("msg=\"Execute entropy source\" path=\"%s\" rd_file_id=\"%ld\"")},
82 { MSG_ENFAIL, SH_ERR_ALL, RUN, N_("msg=\"Could not execute entropy source\" path=\"%s\"")},
83 { MSG_ENTOUT, SH_ERR_ALL, RUN, N_("msg=\"Timeout in entropy collector\" time=\"%ld\"")},
84 { MSG_ENCLOS, SH_ERR_ALL, RUN, N_("msg=\"End of data, closing entropy source\" rd_file_id=\"%ld\"")},
85 { MSG_ENCLOS1, SH_ERR_ALL, RUN, N_("msg=\"Close entropy source\" rd_file_id=\"%ld\"")},
86 { MSG_ENREAD, SH_ERR_ALL, RUN, N_("msg=\"Data from entropy source\" rd_file_id=\"%ld\" bytes=\"%ld\"")},
87#endif
88
89#ifdef SH_USE_SUIDCHK
90 { MSG_SUID_POLICY, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [SuidCheck] %s\" path=\"%s\" %s") },
91 { MSG_SUID_FOUND, SH_ERR_INFO, RUN, N_("msg=\"Found suid/sgid file\" path=\"%s\"") },
92 { MSG_SUID_SUMMARY,SH_ERR_INFO, RUN, N_("msg=\"Checked for SUID programs: %ld files, %ld seconds\"") },
93 { MSG_SUID_QREPORT,SH_ERR_SEVERE, EVENT, N_("msg=\"Quarantine report: %s\" path=\"%s\"") },
94 { MSG_SUID_ERROR, SH_ERR_SEVERE, EVENT, N_("msg=\"Quarantine error: %s\"") },
95#endif
96
97#ifdef SH_USE_KERN
98 /* FreeBSD */
[183]99 { MSG_KERN_POLICY, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Kernel] BSD syscall table: new: %#lx old: %#lx\" syscall=\"%03d %s\"") },
100 { MSG_KERN_POL_CO, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Kernel] BSD syscall code: new: %#x,%#x old: %#x,%#x\" syscall=\"%03d %s\"") },
[1]101
102 /* Linux */
103 { MSG_KERN_SYSCALL,SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Kernel] SYSCALL modified syscall\" syscall=\"%03d %s\" %s") },
104 { MSG_KERN_PROC, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Kernel] PROC modified proc filesystem: %s\"") },
105 { MSG_KERN_IDT, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Kernel] IDT modified interrupt %03d: new: 0x%-8.8lx %-9s %3d %c old: 0x%-8.8lx %-9s %3d %c\" %s") },
106 { MSG_KERN_GATE, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Kernel] SYS_GATE modified system_call: new: %#x,%#x old: %#x,%#x\" syscall=\"%03d %s\" %s") },
107
108#endif
109
110#ifdef SH_USE_UTMP
111 { MSG_UT_CHECK, SH_ERR_INFO, RUN, N_("msg=\"Checking logins\"")},
112 { MSG_UT_LG1X, SH_ERR_INFO, EVENT, N_("msg=\"Login\" userid=\"%s\" tty=\"%s\" host=\"%s\" ip=\"%s\" time=\"%s\" status=\"%d\"")},
113 { MSG_UT_LG1A, SH_ERR_INFO, EVENT, N_("msg=\"Login\" userid=\"%s\" tty=\"%s\" host=\"%s\" time=\"%s\" status=\"%d\"")},
114 { MSG_UT_LG1B, SH_ERR_INFO, EVENT, N_("msg=\"Login\" userid=\"%s\" tty=\"%s\" time=\"%s\" status=\"%d\"")},
115 { MSG_UT_LG2X, SH_ERR_INFO, EVENT, N_("msg=\"Multiple login\" userid=\"%s\" tty=\"%s\" host=\"%s\" ip=\"%s\" time=\"%s\" status=\"%d\"")},
116 { MSG_UT_LG2A, SH_ERR_INFO, EVENT, N_("msg=\"Multiple login\" userid=\"%s\" tty=\"%s\" host=\"%s\" time=\"%s\" status=\"%d\"")},
117 { MSG_UT_LG2B, SH_ERR_INFO, EVENT, N_("msg=\"Multiple login\" userid=\"%s\" tty=\"%s\" time=\"%s\" status=\"%d\"")},
118 { MSG_UT_LG3X, SH_ERR_INFO, EVENT, N_("msg=\"Logout\" userid=\"%s\" tty=\"%s\" host=\"%s\" ip=\"%s\" time=\"%s\" status=\"%d\"")},
119 { MSG_UT_LG3A, SH_ERR_INFO, EVENT, N_("msg=\"Logout\" userid=\"%s\" tty=\"%s\" host=\"%s\" time=\"%s\" status=\"%d\"")},
120 { MSG_UT_LG3B, SH_ERR_INFO, EVENT, N_("msg=\"Logout\" userid=\"%s\" tty=\"%s\" time=\"%s\" status=\"%d\"")},
121 { MSG_UT_LG3C, SH_ERR_INFO, EVENT, N_("msg=\"Logout\" tty=\"%s\" time=\"%s\" status=\"%d\"")},
122 { MSG_UT_ROT, SH_ERR_WARN, RUN, N_("msg=\"Logfile size decreased\" path=\"%s\"")},
123
124#endif
125
[68]126#ifdef SH_USE_PROCESSCHECK
[144]127 { MSG_PCK_CHECK, SH_ERR_INFO, RUN, N_("msg=\"Checking processes in pid interval [%ld,%ld]\"")},
[68]128 { MSG_PCK_OK, SH_ERR_ALL, RUN, N_("msg=\"PID %ld found with tests %s\"")},
[78]129 { MSG_PCK_P_HIDDEN,SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Process] Hidden pid: %ld tests: %s\" path=\"%s\" userid=\"%s\"")},
[68]130 { MSG_PCK_HIDDEN, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Process] Hidden pid: %ld tests: %s\"")},
131 { MSG_PCK_FAKE, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Process] Fake pid: %ld tests: %s\"")},
132 { MSG_PCK_MISS, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Process] Missing: %s\"")},
133#endif
134
135#ifdef SH_USE_PORTCHECK
[169]136 { MSG_PORT_MISS, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [ServiceMissing] %s\"")},
[206]137 { MSG_PORT_NEW, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [ServiceNew] %s\" path=\"%s\" pid=\"%lu\" userid=\"%s\"")},
138 { MSG_PORT_RESTART,SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [ServiceRestarted] %s\" path=\"%s\" pid=\"%lu\" userid=\"%s\"")},
139 { MSG_PORT_NEWPORT,SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [ServicePortSwitch] %s\" path=\"%s\" pid=\"%lu\" userid=\"%s\"")},
[68]140#endif
141
[1]142#ifdef SH_USE_MOUNTS
[144]143 { MSG_MNT_CHECK, SH_ERR_INFO, RUN, N_("msg=\"Checking mounts\"")},
[1]144 { MSG_MNT_MEMLIST, SH_ERR_ERR, RUN, N_("msg=\"Cannot read mount list from memory\"")},
[183]145 { MSG_MNT_MNTMISS, SH_ERR_WARN, EVENT, N_("msg=\"POLICY [Mounts] Mount missing\" path=\"%s\"")},
146 { MSG_MNT_OPTMISS, SH_ERR_WARN, EVENT, N_("msg=\"POLICY [Mounts] Mount option missing\" path=\"%s\" option=\"%s\"")},
[1]147#endif
148
149#ifdef SH_USE_USERFILES
150 { MSG_USERFILES_SUMMARY,SH_ERR_INFO, RUN, N_("msg=\"Checked for users files\"") },
151#endif
152
[183]153#ifdef USE_LOGFILE_MONITOR
154 { MSG_LOGMON_CHKS, SH_ERR_INFO, RUN, N_("msg=\"Checking logfile %s\"") },
155 { MSG_LOGMON_CHKE, SH_ERR_INFO, RUN, N_("msg=\"Finished logfile %s, %lu new records processed\"") },
156 { MSG_LOGMON_MISS, SH_ERR_ERR, RUN, N_("msg=\"Missing logfile %s\"") },
157 { MSG_LOGMON_EOPEN,SH_ERR_ERR, RUN, N_("msg=\"Cannot open logfile %s\"") },
158 { MSG_LOGMON_EREAD,SH_ERR_ERR, RUN, N_("msg=\"Error while reading logfile %s\"") },
159 { MSG_LOGMON_REP, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Logfile] %s\" time=\"%s\" host=\"%s\" path=\"%s\"") },
160 { MSG_LOGMON_SUM, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Logfile] %s\" host=\"%s\" path=\"%s\"") },
[265]161 { MSG_LOGMON_COR, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Logfile] Correlation event %s occured %d time(s)\"") },
162 { MSG_LOGMON_MARK, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Logfile] Event %s missing for %lu seconds\"") },
163 { MSG_LOGMON_BURST, SH_ERR_SEVERE, EVENT, N_("msg=\"POLICY [Logfile] Repeated %d times: %s\" host=\"%s\"") },
[183]164#endif
165
[1]166#if defined(SH_WITH_CLIENT) || defined(SH_STANDALONE)
167
168 { MSG_FI_TOOLATE, SH_ERR_ERR, FIL, N_("msg=\"Large lstat/open overhead: %ld sec\" path=\"%s\"")},
169
170#if 0
171 { MSG_FI_CSUM, SH_ERR_ALL, FIL, N_("msg=\"Checksum\" chk=\"%s\" path=\"%s\"")},
172 { MSG_FI_DSUM, SH_ERR_INFO, FIL, N_("msg=\"d: %3ld, -: %3ld, l: %3ld, |: %3ld, s: %3ld, c: %3ld, b: %3ld\"")},
173 { MSG_FI_CHK, SH_ERR_INFO, FIL, N_("msg=\"Checking\" path=\"%s\"")},
174#endif
175
176 { MSG_FI_NULL, SH_ERR_ERR, FIL, N_("msg=\"Path is NULL\"")},
177 { MSG_FI_FAIL, SH_ERR_ERR, FIL, N_("msg=\"Check failed\" path=\"%s\"")},
178 { MSG_FI_GLOB, SH_ERR_ERR, FIL, N_("interface=\"glob\" msg=\"%s\" path=\"%s\"")},
179 { MSG_FI_COLL, SH_ERR_WARN, FIL, N_("msg=\"Writeable file with timestamps of parent directory fixed\" dir=\"%s\" path=\"%s\"")},
180 { MSG_FI_DOUBLE, SH_ERR_WARN, FIL, N_("msg=\"File or directory appears twice in configuration\" path=\"%s\"")},
181 { MSG_FI_2LONG, SH_ERR_ERR, FIL, N_("msg=\"Filename too long\" path=\"%s\"")},
182 { MSG_FI_2LONG2, SH_ERR_ERR, FIL, N_("msg=\"Filename too long\" path=\"%s/%s\"")},
183 { MSG_FI_NOPATH, SH_ERR_ERR, FIL, N_("msg=\"Filename not an absolute path\" path=\"%s\"")},
184 { MSG_FI_DLNK, SH_ERR_INFO, FIL, N_("msg=\"Dangling link\" path=\"%s\" linked_path=\"%s\"")},
185 { MSG_FI_RDLNK, SH_ERR_ERR, FIL, N_("interface=\"readlink\" msg=\"%s\" path=\"%s\"")},
186 { MSG_FI_NOGRP, SH_ERR_ERR, FIL, N_("interface=\"getgrgid\" msg=\"No such group\" group=\"%ld\" path=\"%s\"")},
187 { MSG_FI_NOUSR, SH_ERR_ERR, FIL, N_("interface=\"getpwuid\" msg=\"No such user\" userid=\"%ld\" path=\"%s\"")},
[192]188 { MSG_FI_STAT, SH_ERR_ERR, FIL, N_("interface=\"%s\" msg=\"%s\" userid=\"%ld\" path=\"%s\"")},
[1]189 { MSG_FI_OBSC, SH_ERR_ERR, FIL, N_("msg=\"Weird filename\" path=\"%s\"")},
190 { MSG_FI_OBSC2, SH_ERR_ERR, FIL, N_("msg=\"Weird filename\" path=\"%s/%s\"")},
191 { MSG_FI_LIST, SH_ERR_ALL, FIL, N_("msg=\"%10s %2d %8s %8s %14ld %21s %s\"")},
192 { MSG_FI_LLNK, SH_ERR_ALL, FIL, N_("msg=\" >>> %10s %s\"")},
193 { MSG_FI_MISS, SH_ERR_ERR, EVENT, N_("msg=\"POLICY MISSING\" path=\"%s\"")},
194 { MSG_FI_MISS2, SH_ERR_ERR, EVENT, N_("msg=\"POLICY MISSING\" path=\"%s\" %s")},
195 { MSG_FI_ADD, SH_ERR_ERR, EVENT, N_("msg=\"POLICY ADDED\" path=\"%s\"")},
196 { MSG_FI_ADD2, SH_ERR_ERR, EVENT, N_("msg=\"POLICY ADDED\" path=\"%s\" %s")},
197 { MSG_FI_CHAN, SH_ERR_ERR, EVENT, N_("msg=\"POLICY %s %s\" path=\"%s\" %s")},
198 { MSG_FI_NODIR, SH_ERR_ERR, EVENT, N_("msg=\"POLICY NODIRECTORY\" path=\"%s\"")},
199 { MSG_FI_DBEX, SH_ERR_WARN, FIL, N_("msg=\"Signature database exists\" path=\"%s\"")},
200#endif
201
202 { MSG_TCP_NETRP, SH_ERR_ERR, TCP, N_("msg=\"Connection error: %s\" port=\"%ld\" subroutine=\"%s\"")},
203
204#ifndef SH_STANDALONE
205
206#ifdef INET_SYSLOG
207 { MSG_INET_SYSLOG, SH_ERR_INET, TCP, N_("ip=\"%s\" facility=\"%s\" priority=\"%s\" syslog_msg=\"%s\"")},
208 { MSG_ERR_SYSLOG, SH_ERR_ERR, TCP, N_("msg=\"syslog socket: %s\" ip=\"%s\"")},
209#endif
210 { MSG_TCP_MISMATCH,SH_ERR_ERR, TCP, N_("msg=\"Protocol mismatch\"")},
211 { MSG_TCP_MISENC, SH_ERR_ERR, TCP, N_("msg=\"Encryption mismatch in %s: server: %s client: %s\"")},
[68]212 { MSG_TCP_NONAME, SH_ERR_ERR, TCP, N_("msg=\"No server name known\"")},
[1]213 { MSG_TCP_UNEXP, SH_ERR_ERR, TCP, N_("msg=\"Unexpected reply\"")},
214 { MSG_TCP_EFIL, SH_ERR_ERR, TCP, N_("msg=\"Could not open temporary file\"")},
215 { MSG_TCP_NOCONF, SH_ERR_ERR, TCP, N_("msg=\"Message delivery not confirmed\"")},
216 { MSG_TCP_NOAUTH, SH_ERR_ERR, TCP, N_("msg=\"Session key negotiation failed\"")},
217 { MSG_TCP_CONF, SH_ERR_ALL, TCP, N_("msg=\"Message delivery confirmed\"")},
218 { MSG_TCP_AUTH, SH_ERR_INFO, TCP, N_("msg=\"Session key negotiated\"")},
219 { MSG_TCP_FOK, SH_ERR_INFO, TCP, N_("msg=\"File download completed\"")},
220 { MSG_TCP_FBAD, SH_ERR_ERR, TCP, N_("msg=\"File download failed\"")},
221 { MSG_TCP_ECONN, SH_ERR_ERR, TCP, N_("msg=\"Connection error: %s\"")},
222 { MSG_TCP_EZERO, SH_ERR_ERR, TCP, N_("msg=\"Illegal zero reply\"")},
223 { MSG_TCP_EBGN, SH_ERR_ERR, TCP, N_("msg=\"Error in big integer library\"")},
224
225 { MSG_TCP_CREG, SH_ERR_ALL, TCP, N_("msg=\"Registered %s, salt %s, verifier %s\"")},
226 { MSG_TCP_FAUTH, SH_ERR_INFO, TCP, N_("msg=\"Force authentication\" host=\"%s\"")},
227
228 { MSG_TCP_RESCLT, SH_ERR_SEVERE, TCP, N_("msg=\"Cannot resolve client name\" host=\"%s\"")},
229 { MSG_TCP_RESPEER, SH_ERR_SEVERE, TCP, N_("msg=\"Cannot resolve socket peer IP for client\" host=\"%s\" peer=\"%s\"")},
230 { MSG_TCP_LOOKERS, SH_ERR_SEVERE, TCP, N_("msg=\"Reverse lookup of socket peer failed\" host=\"%s\" peer=\"%s\" obj=\"%s\"")},
231 { MSG_TCP_LOOKUP, SH_ERR_SEVERE, TCP, N_("msg=\"No socket peer alias matches client name\" host=\"%s\" peer=\"%s\"")},
232
233 { MSG_TCP_TIMOUT, SH_ERR_SEVERE, TCP, N_("msg=\"Connection timeout\" host=\"%s\"")},
234 { MSG_TCP_TIMEXC, SH_ERR_SEVERE, TCP, N_("msg=\"Time limit exceeded\" host=\"%s\"")},
235 { MSG_TCP_NOCLT, SH_ERR_SEVERE, TCP, N_("msg=\"Hostname is NULL\"")},
236 { MSG_TCP_BADCONN, SH_ERR_SEVERE, TCP, N_("msg=\"Invalid connection attempt: %s\" host=\"%s\"")},
237 { MSG_TCP_FFILE , SH_ERR_SEVERE, TCP, N_("msg=\"Unknown file request\" host=\"%s\" path=\"%s\"")},
238 { MSG_TCP_NFILE , SH_ERR_SEVERE, TCP, N_("msg=\"Requested file not found\" host=\"%s\" path=\"%s\"")},
239 { MSG_TCP_FINV , SH_ERR_SEVERE, TCP, N_("msg=\"Invalid request (%d) in pass %d\" host=\"%s\" request=\"%c%03o%c%03o%c%03o%c%03o\"")},
240 { MSG_TCP_OKFILE, SH_ERR_INFO, TCP, N_("msg=\"File transfer completed\" host=\"%s\"")},
241 { MSG_TCP_OKMSG, SH_ERR_ALL, TCP, N_("msg=\"Message transfer completed\" host=\"%s\"")},
242 { MSG_TCP_MSG, SH_ERR_INET, TCP, N_("remote_host=\"%s\" > %s </log>")},
243 { MSG_TCP_NEW, SH_ERR_NOTICE, TCP, N_("msg=\"NEW CLIENT\" host=\"%s\"")},
244 { MSG_TCP_ILL, SH_ERR_SEVERE, TCP, N_("msg=\"Restart without prior exit\" host=\"%s\"")},
245 { MSG_TCP_SYNC, SH_ERR_SEVERE, TCP, N_("msg=\"Out of sync\" host=\"%s\"")},
[113]246 { MSG_TCP_RESET, SH_ERR_NOTICE, TCP, N_("msg=\"Connection reset by peer\" host=\"%s\"")},
[1]247 { MSG_TCP_CNEW, SH_ERR_INFO, TCP, N_("msg=\"New connection\" socket_id=\"%d\"")},
248 { MSG_E_HTML, SH_ERR_ERR, ERR, N_("msg=\"Error writing HTML status\"")},
249#endif
250
251
252 { MSG_E_AUTH, SH_ERR_FATAL, PANIC, N_("msg=\"PANIC - File modified\" path=\"%s\"")},
253 { MSG_ACCESS, SH_ERR_FATAL, PANIC, N_("msg=\"PANIC - Access violation\" userid=\"%ld\" path=\"%s\"")},
254 { MSG_TRUST, SH_ERR_FATAL, PANIC, N_("msg=\"PANIC - Untrusted path\" userid=\"%ld\" path=\"%s\"")},
255 { MSG_NOACCESS, SH_ERR_FATAL, PANIC, N_("msg=\"PANIC - File not accessible\" userid=\"%ld\" path=\"%s\"")},
256 { MSG_P_NODATA, SH_ERR_FATAL, PANIC, N_("msg=\"PANIC - No data in file\" path=\"%s\"")},
257
258
259#ifndef MEM_DEBUG
260 { MSG_E_MNULL, SH_ERR_ERR, ERR, N_("msg=\"Dereferenced NULL pointer\"")},
261 { MSG_E_MMEM, SH_ERR_ERR, ERR, N_("msg=\"Out of memory\"")},
262#else
263 { MSG_MSTAMP, SH_ERR_STAMP, STAMP, N_("msg=\"Memory used: max.=%lu, current=%lu\"")},
264 { MSG_MSTAMP2, SH_ERR_STAMP, STAMP, N_("msg=\"Blocks: %d allocated, %d freed, %d maximum\"")},
[257]265 { MSG_E_MNULL, SH_ERR_ERR, ERR, N_("msg=\"Dereferenced NULL pointer allocated in %s, line %d\" source_file=\"%s\" source_line=\"%d\"")},
[1]266 { MSG_E_MMEM, SH_ERR_ERR, ERR, N_("msg=\"Out of memory\" source_file=\"%s\" source_line=\"%d\"")},
267 { MSG_E_MREC, SH_ERR_ERR, ERR, N_("msg=\"Free() on unrecorded block\" source_file=\"%s\" source_line=\"%d\"")},
268 { MSG_E_MOVER, SH_ERR_ERR, ERR, N_("msg=\"Memory overrun on block allocated in %s, line %d\" source_file=\"%s\" source_line=\"%d\"")},
269 { MSG_E_MUNDER, SH_ERR_ERR, ERR, N_("msg=\"Memory underrun on block allocated in %s, line %d\" source_file=\"%s\" source_line=\"%d\"")},
270 { MSG_E_NOTFREE, SH_ERR_ERR, ERR, N_("msg=\"Block not deallocated\" size=\"%14ld\" source_file=\"%19s\" source_line=\"%d\"")},
271#endif
272
273 { MSG_E_TRUST, SH_ERR_ERR, ERR, N_("msg=\"Untrusted path\" userid=\"%ld\" path=\"%s\"")},
274 { MSG_E_HASH, SH_ERR_ERR, ERR, N_("msg=\"Incorrect checksum\" path=\"%s\"")},
275 { MSG_E_ACCESS, SH_ERR_ERR, ERR, N_("msg=\"File not accessible\" userid=\"%ld\" path=\"%s\"")},
[192]276 { MSG_E_READ, SH_ERR_ERR, ERR, N_("msg=\"Not accessible or not a regular file (%s / %s)\" path=\"%s\"")},
[185]277 { MSG_E_NOTREG, SH_ERR_ERR, ERR, N_("msg=\"Not a regular file\" path=\"%s\"")},
[1]278 { MSG_E_TIMEOUT, SH_ERR_ERR, ERR, N_("msg=\"Timeout (%d sec) while checksumming file\" path=\"%s\"")},
[170]279 { MSG_NODEV, SH_ERR_ERR, ERR, N_("msg=\"Device not available or timeout during read attempt\" userid=\"%ld\" path=\"%s\"")},
[1]280 { MSG_LOCKED, SH_ERR_ERR, ERR, N_("msg=\"File lock error\" userid=\"%ld\" path=\"%s\" obj=\"%s\"")},
281 { MSG_PIDFILE, SH_ERR_ERR, ERR, N_("msg=\"Could not write PID file\" userid=\"%ld\" path=\"%s\"")},
282 { MSG_NOEXEC, SH_ERR_ERR, ERR, N_("msg=\"Could not execute file\" userid=\"%ld\" path=\"%s\"")},
283
284 { MSG_ES_ENT, SH_ERR_ERR, ERR, N_("msg=\"No entropy collected\" subroutine=\"%s\"")},
285 { MSG_ES_KEY1, SH_ERR_ERR, ERR, N_("msg=\"Insecure key generation\" subroutine=\"%s\"")},
286 { MSG_ES_KEY2, SH_ERR_ERR, ERR, N_("msg=\"Error copying key\" subroutine=\"%s\"")},
287 { MSG_E_GPG, SH_ERR_ERR, ERR, N_("msg=\"Compiled-in gpg checksum does not match: need %s got %s\"")},
288 { MSG_E_GPG_FP, SH_ERR_ERR, ERR, N_("msg=\"Compiled-in fingerprint modified: one %s two %s\"")},
289 { MSG_E_GPG_CHK, SH_ERR_ERR, ERR, N_("msg=\"Compiled-in checksum modified: one %s two %s\"")},
290 { MSG_E_SUBGEN, SH_ERR_ERR, ERR, N_("msg=\"%s\" subroutine=\"%s\"")},
291 { MSG_E_SUBGPATH, SH_ERR_ERR, ERR, N_("msg=\"%s\" subroutine=\"%s\" path=\"%s\"")},
292 { MSG_E_UNLNK, SH_ERR_ERR, FIL, N_("interface=\"unlink\" msg=\"%s\" path=\"%s\"")},
293 { MSG_E_REGEX, SH_ERR_ERR, ERR, N_("interface=\"regcomp\" msg=\"%s\" obj=\"%s\"")},
294 { MSG_E_OPENDIR, SH_ERR_ERR, FIL, N_("interface=\"opendir\" msg=\"%s\" path=\"%s\"")},
295 { MSG_E_TRUST1, SH_ERR_ERR, ERR, N_("msg=\"%s\" subroutine=\"trustfile\" path=\"%s\"")},
296 { MSG_E_TRUST2, SH_ERR_ERR, ERR, N_("msg=\"%s\" subroutine=\"trustfile\" path=\"%s\" obj=\"%s\"")},
297 { MSG_E_PWNULL, SH_ERR_ERR, ERR, N_("msg=\"Empty password file entry: %s\" subroutine=\"%s\" userid=\"%ld\" obj=\"%s\"")},
298 { MSG_E_PWLONG, SH_ERR_ERR, ERR, N_("msg=\"Password file entry too long\" subroutine=\"%s\" userid=\"%ld\" obj=\"%s\"")},
299 { MSG_E_GRNULL, SH_ERR_ERR, ERR, N_("msg=\"Empty groups file entry: %s\" subroutine=\"%s\" group=\"%ld\" obj=\"%s\"")},
300
301 { MSG_E_NET, SH_ERR_ERR, ENET, N_("msg=\"%s\" subroutine=\"%s\" service=\"%s\" host=\"%s\"")},
302 { MSG_E_NETST, SH_ERR_ERR, ENET, N_("msg=\"Invalid connection state\" expect=\"%4s\" received=\"%4s\"")},
303 { MSG_E_NETST1, SH_ERR_ERR, ENET, N_("msg=\"Invalid connection state\" expect=\"%4s\" received=\"%4s\" host=\"%s\"")},
304 { MSG_E_NLOST, SH_ERR_ERR, ENET, N_("msg=\"Connection failure\" service=\"%s\" host=\"%s\"")},
305 { MSG_E_NEST, SH_ERR_ERR, ENET, N_("msg=\"Connection reestablished\" service=\"%s\" host=\"%s\"")},
306
307 { MSG_EINVALHEAD, SH_ERR_WARN, EINPUT,N_("msg=\"Unrecognized section heading in line %ld of configuration file\"")},
308 { MSG_EINVALCONF, SH_ERR_WARN, EINPUT,N_("msg=\"Invalid line %ld in configuration file: incorrect format, unrecognized option, or missing section header\"")},
309 { MSG_EINVALS, SH_ERR_WARN, EINPUT,N_("msg=\"Invalid input\" option=\"%s\" obj=\"%s\"")},
310 { MSG_EINVALL, SH_ERR_WARN, EINPUT,N_("msg=\"Invalid input\" option=\"%s\" obj=\"%ld\"")},
311 { MSG_EINVALD, SH_ERR_WARN, EINPUT,N_("msg=\"Configuration file: unmatched @end\" option=\"%s\" obj=\"%ld\"")},
312 { MSG_EINVALDD, SH_ERR_WARN, EINPUT,N_("msg=\"Configuration file: missing @end\" option=\"%s\" obj=\"%ld\"")},
313
314 { MSG_SRV_FAIL, SH_ERR_ERR, ERR, N_("msg=\"Service failure\" service=\"%s\" obj=\"%s\"")},
315 { MSG_QUEUE_FULL, SH_ERR_ERR, ERR, N_("msg=\"Queue full, messages may get lost\" service=\"%s\"")},
316
317 { MSG_AUD_OPEN, SH_ERR_NOTICE, AUD, N_("interface=\"open\" path=\"%s\" oflag=\"%ld\" mode=\"%ld\" return_id=\"%ld\"")},
318 { MSG_AUD_DUP, SH_ERR_NOTICE, AUD, N_("interface=\"dup\" file_id=\"%ld\" return_id=\"%ld\"")},
319 { MSG_AUD_PIPE, SH_ERR_NOTICE, AUD, N_("interface=\"pipe\" rd_file_id=\"%ld\" wr_file_id=\"%ld\"")},
320 { MSG_AUD_FORK, SH_ERR_NOTICE, AUD, N_("interface=\"fork\" return_id=\"%ld\"")},
321 { MSG_AUD_EXIT, SH_ERR_NOTICE, AUD, N_("interface=\"exit\" exit_code=\"%ld\"")},
322 { MSG_AUD_SETUID, SH_ERR_NOTICE, AUD, N_("interface=\"setuid\" uid=\"%ld\"")},
323 { MSG_AUD_SETGID, SH_ERR_NOTICE, AUD, N_("interface=\"setgid\" gid=\"%ld\"")},
324 { MSG_AUD_UTIME, SH_ERR_NOTICE, AUD, N_("interface=\"utime\" path=\"%s\" atime=\"%ld\" mtime=\"%ld\"")},
325 { MSG_AUD_EXEC, SH_ERR_NOTICE, AUD, N_("interface=\"exec\" path=\"%s\" uid=\"%ld\" gid=\"%ld\"")},
326 { MSG_AUD_CHDIR, SH_ERR_NOTICE, AUD, N_("interface=\"chdir\" path=\"%s\"")},
327 { MSG_AUD_UNLINK, SH_ERR_NOTICE, AUD, N_("interface=\"unlink\" path=\"%s\"")},
328 { MSG_AUD_KILL, SH_ERR_NOTICE, AUD, N_("interface=\"kill\" pid=\"%ld\" sig=\"%ld\"")},
329
330 { MSG_ERR_OPEN, SH_ERR_ALL, ERR, N_("interface=\"open\" msg=\"%s\" path=\"%s\" oflag=\"%ld\" mode=\"%ld\" return_id=\"%ld\"")},
331 { MSG_ERR_DUP, SH_ERR_ALL, ERR, N_("interface=\"dup\" msg=\"%s\" file_id=\"%ld\" return_id=\"%ld\"")},
332 { MSG_ERR_PIPE, SH_ERR_ALL, ERR, N_("interface=\"pipe\" msg=\"%s\" rd_file_id=\"%ld\" wr_file_id=\"%ld\"")},
333 { MSG_ERR_FORK, SH_ERR_ALL, ERR, N_("interface=\"fork\" msg=\"%s\" return_id=\"%ld\"")},
334 { MSG_ERR_SETUID, SH_ERR_ALL, ERR, N_("interface=\"setuid\" msg=\"%s\" uid=\"%ld\"")},
335 { MSG_ERR_SETGID, SH_ERR_ALL, ERR, N_("interface=\"setgid\" msg=\"%s\" gid=\"%ld\"")},
336 { MSG_ERR_UTIME, SH_ERR_ALL, ERR, N_("interface=\"utime\" msg=\"%s\" path=\"%s\" atime=\"%ld\" mtime=\"%ld\"")},
337 { MSG_ERR_EXEC, SH_ERR_ALL, ERR, N_("interface=\"exec\" msg=\"%s\" path=\"%s\" uid=\"%ld\" gid=\"%ld\"")},
338 { MSG_ERR_CHDIR, SH_ERR_ALL, ERR, N_("interface=\"chdir\" msg=\"%s\" path=\"%s\"")},
339 { MSG_ERR_UNLINK, SH_ERR_ALL, ERR, N_("interface=\"unlink\" msg=\"%s\" path=\"%s\"")},
340 { MSG_ERR_KILL, SH_ERR_ALL, ERR, N_("interface=\"kill\" msg=\"%s\" pid=\"%ld\" sig=\"%ld\"")},
341
342 { MSG_ERR_SIGACT, SH_ERR_ALL, ERR, N_("interface=\"sigaction\" msg=\"%s\" sig=\"%ld\"")},
343 { MSG_ERR_CONNECT, SH_ERR_ALL, ERR, N_("interface=\"connect\" msg=\"%s\" socket_id=\"%ld\" port=\"%ld\" host=\"%s\"")},
344 { MSG_ERR_ACCEPT, SH_ERR_ALL, ERR, N_("interface=\"accept\" msg=\"%s\" socket_id=\"%ld\"")},
345 { MSG_ERR_LSTAT, SH_ERR_ALL, ERR, N_("interface=\"lstat\" msg=\"%s\" path=\"%s\"")},
346 { MSG_ERR_STAT, SH_ERR_ALL, ERR, N_("interface=\"stat\" msg=\"%s\" path=\"%s\"")},
347 { MSG_ERR_FSTAT, SH_ERR_ALL, ERR, N_("interface=\"fstat\" msg=\"%s\" file_id=\"%ld\"")},
348 { MSG_ERR_FCNTL, SH_ERR_ALL, ERR, N_("interface=\"fcntl\" msg=\"%s\" file_id=\"%ld\" cmd=\"%ld\" arg=\"%ld\"")},
349
350 { 0, 0, 0, NULL}
351};
352
353
354
355/********************************************************************
356 *
357 *
358 * NO XML
359 *
360 *
361 ********************************************************************/
362
363
364
365
366
367/* #ifdef (SH_USE_XML) */
368#else
369
370cat_entry msg_cat[] = {
371#if defined(SH_WITH_CLIENT) || defined(SH_STANDALONE)
372 { MSG_FI_CSUM, SH_ERR_ALL, FIL, N_("msg=<Checksum>, chk=<%s>, path=<%s>")},
373 { MSG_FI_DSUM, SH_ERR_INFO, FIL, N_("msg=<d: %3ld, -: %3ld, l: %3ld, |: %3ld, s: %3ld, c: %3ld, b: %3ld>")},
374 { MSG_FI_CHK, SH_ERR_INFO, FIL, N_("msg=<Checking>, path=<%s>")},
375#endif
376
377 { MSG_EXIT_ABORTS, SH_ERR_FATAL, PANIC, N_("msg=<PANIC %s>, program=<%s>, subroutine=<%s>")},
378 { MSG_START_SRV, SH_ERR_STAMP, START, N_("msg=<Server up, simultaneous connections: %d>, socket_id=<%d>")},
379
380 { MSG_EXIT_ABORT1, SH_ERR_FATAL, PANIC, N_("msg=<PANIC Error initializing the application>, program=<%s>")},
381 { MSG_EXIT_NORMAL, SH_ERR_FATAL, START, N_("msg=<EXIT>, program=<%s>, status=<%s>")},
382 { MSG_START_KEY_MAIL, SH_ERR_FATAL, LOGKEY, N_("msg=<LOGKEY>, program=<%s>, hash=<%s>\r\n-----BEGIN LOGKEY-----\r\n%s%s")},
383 { MSG_START_KEY, SH_ERR_FATAL, LOGKEY, N_("msg=<LOGKEY>, program=<%s>, hash=<%s>")},
384 { MSG_START_0H, SH_ERR_FATAL, START, N_("msg=<START>, program=<%s>, userid=<%ld>")},
385 { MSG_START_1H, SH_ERR_FATAL, START, N_("msg=<START>, program=<%s>, userid=<%ld>, path=<%s>, hash=<%s>")},
386 { MSG_START_2H, SH_ERR_FATAL, START, N_("msg=<START>, program=<%s>, userid=<%ld>, path=<%s>, hash=<%s>, path=<%s>, hash=<%s>")},
387 { MSG_START_GH, SH_ERR_FATAL, START, N_("msg=<START>, program=<%s>, userid=<%ld>, path=<%s>, key_uid=<%s>, key_id=<%s>")},
388 { MSG_START_GH2, SH_ERR_FATAL, START, N_("msg=<EXIT>, program=<%s>, userid=<%ld>, path=<%s>, key_uid=<%s>, key_id=<%s>, path=<%s>, key_uid=<%s>, key_id=<%s>")},
389 { MSG_SUSPEND, SH_ERR_STAMP, START, N_("msg=<SUSPEND> program=<%s>")},
390
391
392 { MSG_MLOCK, SH_ERR_WARN, RUN, N_("msg=<Using insecure memory>")},
393 { MSG_W_SIG, SH_ERR_WARN, RUN, N_("msg=<%s>, interface=<sigaction>, signal=<%ld>")},
394 { MSG_W_CHDIR, SH_ERR_ERR, RUN, N_("msg=<%s>, interface=<chdir>, path=<%s>")},
395
396 { MSG_MOD_FAIL, SH_ERR_WARN, RUN, N_("msg=<Module not initialized>, module=<%s>, return_code=<%ld>")},
397 { MSG_MOD_OK, SH_ERR_INFO, RUN, N_("msg=<Module initialized>, module=<%s>")},
398 { MSG_MOD_EXEC, SH_ERR_ERR, RUN, N_("msg=<Module execution error>, module=<%s>, return_code=<%ld>")},
399
400 { MSG_RECONF, SH_ERR_SEVERE, START, N_("msg=<Runtime configuration reloaded>")},
401 { MSG_CHECK_0, SH_ERR_WARN, RUN, N_("msg=<No files or directories defined for checking>")},
402 { MSG_CHECK_1, SH_ERR_STAMP, STAMP, N_("msg=<File check completed.>, time=<%ld>, kBps=<%f>")},
403 { MSG_STAMP, SH_ERR_STAMP, STAMP, N_("msg=<---- TIMESTAMP ---->")},
404
405 { MSG_D_START, SH_ERR_INFO, RUN, N_("msg=<Downloading configuration file>")},
406 { MSG_D_DSTART, SH_ERR_INFO, RUN, N_("msg=<Downloading database file>")},
407 { MSG_D_FAIL, SH_ERR_INFO, RUN, N_("msg=<No file from server, trying local file>")},
408
409
410#ifndef HAVE_URANDOM
411 { MSG_ENSTART, SH_ERR_ALL, RUN, N_("msg=<Found entropy source>, path=<%s>")},
412 { MSG_ENEXEC, SH_ERR_ALL, RUN, N_("msg=<Execute entropy source>, path=<%s>, rd_file_id=<%ld>")},
413 { MSG_ENFAIL, SH_ERR_ALL, RUN, N_("msg=<Could not execute entropy source>, path=<%s>")},
414 { MSG_ENTOUT, SH_ERR_ALL, RUN, N_("msg=<Timeout in entropy collector>, time=<%ld>")},
415 { MSG_ENCLOS, SH_ERR_ALL, RUN, N_("msg=<End of data, closing entropy source>, rd_file_id=<%ld>")},
416 { MSG_ENCLOS1, SH_ERR_ALL, RUN, N_("msg=<Close entropy source>, rd_file_id=<%ld>")},
417 { MSG_ENREAD, SH_ERR_ALL, RUN, N_("msg=<Data from entropy source>, rd_file_id=<%ld>, bytes=<%ld>")},
418#endif
419
420#ifdef SH_USE_SUIDCHK
421 { MSG_SUID_POLICY, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [SuidCheck] %s>, path=<%s>, %s") },
422 { MSG_SUID_FOUND, SH_ERR_INFO, RUN, N_("msg=<Found suid/sgid file> path=<%s>") },
423 { MSG_SUID_SUMMARY,SH_ERR_INFO, RUN, N_("msg=<Checked for SUID programs: %ld files, %ld seconds>") },
424 { MSG_SUID_QREPORT,SH_ERR_SEVERE, EVENT, N_("msg=<Quarantine report: %s>, path=<%s>") },
425 { MSG_SUID_ERROR, SH_ERR_SEVERE, EVENT, N_("msg=<Quarantine error: %s>") },
426#endif
427
428#ifdef SH_USE_KERN
[183]429 { MSG_KERN_POLICY, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Kernel] BSD syscall table: new: %#lx old: %#lx>, syscall=<%03d %s>") },
430 { MSG_KERN_POL_CO, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Kernel] BSD syscall code: new: %#x,%#x old: %#x,%#x>, syscall=<%03d %s>") },
[1]431
432 { MSG_KERN_SYSCALL,SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Kernel] SYSCALL modified> syscall=<%03d %s>, %s") },
433 { MSG_KERN_PROC, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Kernel] PROC modified proc filesystem: %s>") },
434 { MSG_KERN_IDT, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Kernel] IDT interrupt %03d: new: 0x%-8.8lx %-9s %3d %c old: 0x%-8.8lx %-9s %3d %c>, %s") },
435 { MSG_KERN_GATE, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Kernel SYS_GATE code: new: %#x,%#x old: %#x,%#x> syscall=<%03d %s>, %s") },
436
437#endif
438
439#ifdef SH_USE_UTMP
440 { MSG_UT_CHECK, SH_ERR_INFO, RUN, N_("msg=<Checking logins>")},
441
442 { MSG_UT_LG1X, SH_ERR_INFO, EVENT, N_("msg=<Login>, name=<%s>, tty=<%s>, host=<%s>, ip=<%s>, time=<%s>, status=<%d>")},
443 { MSG_UT_LG1A, SH_ERR_INFO, EVENT, N_("msg=<Login>, name=<%s>, tty=<%s>, host=<%s>, time=<%s>, status=<%d>")},
444 { MSG_UT_LG1B, SH_ERR_INFO, EVENT, N_("msg=<Login>, name=<%s>, tty=<%s>, time=<%s>, status=<%d>")},
445
446 { MSG_UT_LG2X, SH_ERR_INFO, EVENT, N_("msg=<Multiple login>, name=<%s>, tty=<%s>, host=<%s>, ip=<%s>, time=<%s>, status=<%d>")},
447 { MSG_UT_LG2A, SH_ERR_INFO, EVENT, N_("msg=<Multiple login>, name=<%s>, tty=<%s>, host=<%s>, time=<%s>, status=<%d>")},
448 { MSG_UT_LG2B, SH_ERR_INFO, EVENT, N_("msg=<Multiple login>, name=<%s>, tty=<%s>, time=<%s>, status=<%d>")},
449
450 { MSG_UT_LG3X, SH_ERR_INFO, EVENT, N_("msg=<Logout>, name=<%s>, tty=<%s>, host=<%s>, ip=<%s>, time=<%s>, status=<%d>")},
451 { MSG_UT_LG3A, SH_ERR_INFO, EVENT, N_("msg=<Logout>, name=<%s>, tty=<%s>, host=<%s>, time=<%s>, status=<%d>")},
452 { MSG_UT_LG3B, SH_ERR_INFO, EVENT, N_("msg=<Logout>, name=<%s>, tty=<%s>, time=<%s>, status=<%d>")},
453 { MSG_UT_LG3C, SH_ERR_INFO, EVENT, N_("msg=<Logout>, tty=<%s>, time=<%s>")},
454 { MSG_UT_ROT, SH_ERR_WARN, RUN, N_("msg=<Logfile size decreased>, path=<%s>")},
455
456#endif
457
[68]458#ifdef SH_USE_PROCESSCHECK
[144]459 { MSG_PCK_CHECK, SH_ERR_INFO, RUN, N_("msg=<Checking processes in pid interval [%ld,%ld]>")},
[68]460 { MSG_PCK_OK, SH_ERR_ALL, RUN, N_("msg=<PID %ld found with tests %s>")},
[78]461 { MSG_PCK_P_HIDDEN,SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Process] Hidden pid: %ld tests: %s> path=<%s> userid=<%s>")},
[68]462 { MSG_PCK_HIDDEN, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Process] Hidden pid: %ld tests: %s>")},
463 { MSG_PCK_FAKE, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Process] Fake pid: %ld tests: %s>")},
464 { MSG_PCK_MISS, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Process] Missing: %s>")},
465#endif
466
467#ifdef SH_USE_PORTCHECK
[169]468 { MSG_PORT_MISS, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [ServiceMissing] %s>")},
[206]469 { MSG_PORT_NEW, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [ServiceNew] %s> path=<%s> pid=<%lu> userid=<%s>")},
470 { MSG_PORT_RESTART,SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [ServiceRestarted] %s> path=<%s> pid=<%lu> userid=<%s>")},
471 { MSG_PORT_NEWPORT,SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [ServicePortSwitch] %s> path=<%s> pid=<%lu> userid=<%s>")},
[68]472#endif
473
[1]474#ifdef SH_USE_MOUNTS
475 { MSG_MNT_CHECK, SH_ERR_INFO, RUN, N_("msg=<Checking mounts>")},
476 { MSG_MNT_MEMLIST, SH_ERR_ERR, RUN, N_("msg=<Cannot read mount list from memory>")},
[183]477 { MSG_MNT_MNTMISS, SH_ERR_WARN, EVENT, N_("msg=<POLICY [Mounts] Mount missing>, path=<%s>")},
478 { MSG_MNT_OPTMISS, SH_ERR_WARN, EVENT, N_("msg=<POLICY [Mounts] Mount option missing>, path=<%s>, option=<%s>")},
[1]479#endif
480
481#ifdef SH_USE_USERFILES
482 { MSG_USERFILES_SUMMARY,SH_ERR_INFO, RUN, N_("msg=<Checked for users files>") },
483#endif
484
[183]485#ifdef USE_LOGFILE_MONITOR
486 { MSG_LOGMON_CHKS, SH_ERR_INFO, RUN, N_("msg=<Checking logfile %s>") },
487 { MSG_LOGMON_CHKE, SH_ERR_INFO, RUN, N_("msg=<Finished logfile %s, %lu new records processed>") },
488 { MSG_LOGMON_MISS, SH_ERR_ERR, RUN, N_("msg=<Missing logfile %s>") },
489 { MSG_LOGMON_EOPEN,SH_ERR_ERR, RUN, N_("msg=<Cannot open logfile %s>") },
490 { MSG_LOGMON_EREAD,SH_ERR_ERR, RUN, N_("msg=<Error while reading logfile %s>") },
[265]491 { MSG_LOGMON_REP, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Logfile] %s> time=<%s>, host=<%s>, path=<%s>") },
[183]492 { MSG_LOGMON_SUM, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Logfile] %s> host=<%s> path=<%s>") },
[265]493 { MSG_LOGMON_COR, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Logfile] Correlation event %s occured %d time(s)>") },
494 { MSG_LOGMON_MARK, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Logfile] Event %s missing for %lu seconds>") },
495 { MSG_LOGMON_BURST, SH_ERR_SEVERE, EVENT, N_("msg=<POLICY [Logfile] Repeated %d times: %s>, host=<%s> ") },
[183]496#endif
497
[1]498#if defined(SH_WITH_CLIENT) || defined(SH_STANDALONE)
499
500 { MSG_FI_TOOLATE, SH_ERR_ERR, FIL, N_("msg=<Large lstat/open overhead (%ld sec)>, path=<%s>")},
501
502#if 0
503 { MSG_FI_CSUM, SH_ERR_ALL, FIL, N_("msg=<Checksum>, chk=<%s>, path=<%s>")},
504 { MSG_FI_DSUM, SH_ERR_INFO, FIL, N_("msg=<d: %3ld, -: %3ld, l: %3ld, |: %3ld, s: %3ld, c: %3ld, b: %3ld>")},
505 { MSG_FI_CHK, SH_ERR_INFO, FIL, N_("msg=<Checking>, path=<%s>")},
506#endif
507
508 { MSG_FI_NULL, SH_ERR_ERR, FIL, N_("msg=<Path is NULL>")},
509 { MSG_FI_FAIL, SH_ERR_ERR, FIL, N_("msg=<Check failed>, path=<%s>")},
510 { MSG_FI_GLOB, SH_ERR_ERR, FIL, N_("msg=<%s>, interface=<glob>, path=<%s>")},
511 { MSG_FI_COLL, SH_ERR_WARN, FIL, N_("msg=<Writeable file with timestamps of parent directory fixed>, dir=<%s>, path=<%s>")},
512 { MSG_FI_DOUBLE, SH_ERR_WARN, FIL, N_("msg=<File or directory appears twice in configuration>, path=<%s>")},
513 { MSG_FI_2LONG, SH_ERR_ERR, FIL, N_("msg=<Filename too long>, path=<%s>")},
514 { MSG_FI_2LONG2, SH_ERR_ERR, FIL, N_("msg=<Filename too long>, path=<%s/%s>")},
515 { MSG_FI_NOPATH, SH_ERR_ERR, FIL, N_("msg=<Filename not an absolute path>, path=<%s>")},
516 { MSG_FI_DLNK, SH_ERR_INFO, FIL, N_("msg=<Dangling link>, path=<%s>, linked_path=<%s>")},
517 { MSG_FI_RDLNK, SH_ERR_ERR, FIL, N_("msg=<%s>, interface=<readlink>, path=<%s>")},
518 { MSG_FI_NOGRP, SH_ERR_ERR, FIL, N_("msg=<No such group>, interface=<getgrgid>, group=<%ld>, path=<%s>")},
519 { MSG_FI_NOUSR, SH_ERR_ERR, FIL, N_("msg=<No such user>, interface=<getpwuid>, userid=<%ld>, path=<%s>")},
[192]520 { MSG_FI_STAT, SH_ERR_ERR, FIL, N_("interface=<%s>, msg=<%s>, userid=<%ld>, path=<%s>")},
[1]521 { MSG_FI_OBSC, SH_ERR_ERR, FIL, N_("msg=<Weird filename>, path=<%s>")},
522 { MSG_FI_OBSC2, SH_ERR_ERR, FIL, N_("msg=<Weird filename>, path=<%s/%s>")},
523 { MSG_FI_LIST, SH_ERR_ALL, FIL, N_("msg=<%10s %2d %8s %8s %14ld %21s %s>")},
524 { MSG_FI_LLNK, SH_ERR_ALL, FIL, N_("msg=< >>> %10s %s>")},
525 { MSG_FI_MISS, SH_ERR_ERR, EVENT, N_("msg=<POLICY MISSING>, path=<%s>")},
526 { MSG_FI_MISS2, SH_ERR_ERR, EVENT, N_("msg=<POLICY MISSING>, path=<%s>, %s")},
527 { MSG_FI_ADD, SH_ERR_ERR, EVENT, N_("msg=<POLICY ADDED>, path=<%s>")},
528 { MSG_FI_ADD2, SH_ERR_ERR, EVENT, N_("msg=<POLICY ADDED>, path=<%s>, %s")},
529 { MSG_FI_CHAN, SH_ERR_ERR, EVENT, N_("msg=<POLICY %s %s>, path=<%s>, %s")},
530 { MSG_FI_NODIR, SH_ERR_ERR, EVENT, N_("msg=<POLICY NODIRECTORY>, path=<%s>")},
531 { MSG_FI_DBEX, SH_ERR_WARN, FIL, N_("msg=<Signature database exists>, path=<%s>")},
532#endif
533
534 { MSG_TCP_NETRP, SH_ERR_ERR, TCP, N_("msg=<Connection error: %s>, port=<%ld>, subroutine=<%s>")},
535
536#ifndef SH_STANDALONE
537#ifdef INET_SYSLOG
538 { MSG_INET_SYSLOG, SH_ERR_INET, TCP, N_("ip=<%s> facility=<%s> priority=<%s> syslog_msg=<%s>")},
539 { MSG_ERR_SYSLOG, SH_ERR_ERR, TCP, N_("msg=<syslog socket: %s>, ip=<%s>")},
540#endif
541 { MSG_TCP_MISMATCH,SH_ERR_ERR, TCP, N_("msg=<Protocol mismatch>")},
542 { MSG_TCP_MISENC, SH_ERR_ERR, TCP, N_("msg=<Encryption mismatch in %s: server: %s client: %s>")},
543 { MSG_TCP_NONAME, SH_ERR_ERR, TCP, N_("msg=<No server name known>")},
544 { MSG_TCP_UNEXP, SH_ERR_ERR, TCP, N_("msg=<Unexpected reply>")},
545 { MSG_TCP_EFIL, SH_ERR_ERR, TCP, N_("msg=<Could not open temporary file>")},
546 { MSG_TCP_NOCONF, SH_ERR_ERR, TCP, N_("msg=<Message delivery not confirmed>")},
547 { MSG_TCP_NOAUTH, SH_ERR_ERR, TCP, N_("msg=<Session key negotiation failed>")},
548 { MSG_TCP_CONF, SH_ERR_ALL, TCP, N_("msg=<Message delivery confirmed>")},
549 { MSG_TCP_AUTH, SH_ERR_INFO, TCP, N_("msg=<Session key negotiated>")},
550 { MSG_TCP_FOK, SH_ERR_INFO, TCP, N_("msg=<File download completed>")},
551 { MSG_TCP_FBAD, SH_ERR_ERR, TCP, N_("msg=<File download failed>")},
552 { MSG_TCP_ECONN, SH_ERR_ERR, TCP, N_("msg=<Connection error: %s>")},
553 { MSG_TCP_EZERO, SH_ERR_ERR, TCP, N_("msg=<Illegal zero reply>")},
554 { MSG_TCP_EBGN, SH_ERR_ERR, TCP, N_("msg=<Error in big integer library>")},
555
556 { MSG_TCP_CREG, SH_ERR_ALL, TCP, N_("msg=<Registered %s, salt %s, verifier %s>")},
557 { MSG_TCP_FAUTH, SH_ERR_INFO, TCP, N_("msg=<Force authentication>, client=<%s>")},
558
559 { MSG_TCP_RESCLT, SH_ERR_SEVERE, TCP, N_("msg=<Cannot resolve client name> host=<%s>")},
560 { MSG_TCP_RESPEER, SH_ERR_SEVERE, TCP, N_("msg=<Cannot resolve socket peer IP for client> host=<%s> peer=<%s>")},
561 { MSG_TCP_LOOKERS, SH_ERR_SEVERE, TCP, N_("msg=<Reverse lookup of socket peer failed> host=<%s> peer=<%s> obj=<%s>")},
562 { MSG_TCP_LOOKUP, SH_ERR_SEVERE, TCP, N_("msg=<No socket peer alias matches client name> host=<%s> peer=<%s>")},
563
564 { MSG_TCP_TIMOUT, SH_ERR_SEVERE, TCP, N_("msg=<Connection timeout>, client=<%s>")},
565 { MSG_TCP_TIMEXC, SH_ERR_SEVERE, TCP, N_("msg=<Time limit exceeded>, client=<%s>")},
566 { MSG_TCP_NOCLT, SH_ERR_SEVERE, TCP, N_("msg=<Hostname is NULL>")},
567 { MSG_TCP_BADCONN, SH_ERR_SEVERE, TCP, N_("msg=<Invalid connection attempt: %s>, client=<%s>")},
568 { MSG_TCP_FFILE , SH_ERR_SEVERE, TCP, N_("msg=<Unknown file request>, client=<%s>, path=<%s>")},
569 { MSG_TCP_NFILE , SH_ERR_SEVERE, TCP, N_("msg=<Requested file not found>, client=<%s>, path=<%s>")},
570 { MSG_TCP_FINV , SH_ERR_SEVERE, TCP, N_("msg=<Invalid request (%d) in pass %d>, client=<%s>, request=<%c%03o%c%03o%c%03o%c%03o>")},
571 { MSG_TCP_OKFILE, SH_ERR_INFO, TCP, N_("msg=<File transfer completed>, client=<%s>")},
572 { MSG_TCP_OKMSG, SH_ERR_ALL, TCP, N_("msg=<Message transfer completed>, client=<%s>")},
573 { MSG_TCP_MSG, SH_ERR_INET, TCP, N_("client=<%s>, msg=<%s>")},
574 { MSG_TCP_NEW, SH_ERR_NOTICE, TCP, N_("msg=<NEW CLIENT>, client=<%s>")},
575 { MSG_TCP_ILL, SH_ERR_SEVERE, TCP, N_("msg=<Restart without prior exit>, client=<%s>")},
576 { MSG_TCP_SYNC, SH_ERR_SEVERE, TCP, N_("msg=<Out of sync>, client=<%s>")},
[113]577 { MSG_TCP_RESET, SH_ERR_NOTICE, TCP, N_("msg=<Connection reset by peer>, client=<%s>")},
[1]578 { MSG_TCP_CNEW, SH_ERR_INFO, TCP, N_("msg=<New connection>, socket_id=<%d>")},
579 { MSG_E_HTML, SH_ERR_ERR, ERR, N_("msg=<Error writing HTML status>")},
580#endif
581
582
583 { MSG_E_AUTH, SH_ERR_FATAL, PANIC, N_("msg=<PANIC - File modified>, path=<%s>")},
584 { MSG_ACCESS, SH_ERR_FATAL, PANIC, N_("msg=<PANIC - Access violation>, userid=<%ld>, path=<%s>")},
585 { MSG_TRUST, SH_ERR_FATAL, PANIC, N_("msg=<PANIC - Untrusted path>, userid=<%ld>, path=<%s>")},
586 { MSG_NOACCESS, SH_ERR_FATAL, PANIC, N_("msg=<PANIC - File not accessible>, userid=<%ld>, path=<%s>")},
587 { MSG_P_NODATA, SH_ERR_FATAL, PANIC, N_("msg=<PANIC - No data in file>, path=<%s>")},
588
589
590#ifndef MEM_DEBUG
591 { MSG_E_MNULL, SH_ERR_ERR, ERR, N_("msg=<Dereferenced NULL pointer>")},
592 { MSG_E_MMEM, SH_ERR_ERR, ERR, N_("msg=<Out of memory>")},
593#else
594 { MSG_MSTAMP, SH_ERR_STAMP, STAMP, N_("msg=<Memory used: max.=%lu, current=%lu>")},
595 { MSG_MSTAMP2, SH_ERR_STAMP, STAMP, N_("msg=<Blocks: %d allocated, %d freed, %d maximum>")},
596 { MSG_E_MNULL, SH_ERR_ERR, ERR, N_("msg=<Dereferenced NULL pointer>, source_file=<%s>, source_line=<%d>")},
597 { MSG_E_MMEM, SH_ERR_ERR, ERR, N_("msg=<Out of memory>, source_file=<%s>, source_line=<%d>")},
598 { MSG_E_MREC, SH_ERR_ERR, ERR, N_("msg=<Free() on unrecorded block>, source_file=<%s>, source_line=<%d>")},
599 { MSG_E_MOVER, SH_ERR_ERR, ERR, N_("msg=<Memory overrun on block allocated in %s, line %d>, source_file=<%s>, source_line=<%d>")},
600 { MSG_E_MUNDER, SH_ERR_ERR, ERR, N_("msg=<Memory underrun on block allocated in %s, line %d>, source_file=<%s>, source_line=<%d>")},
601 { MSG_E_NOTFREE, SH_ERR_ERR, ERR, N_("msg=<Not deallocated: size %14ld>, source_file=<%19s>, source_line=<%d>")},
602#endif
603
604 { MSG_E_TRUST, SH_ERR_ERR, ERR, N_("msg=<Untrusted path>, userid=<%ld>, path=<%s>")},
605 { MSG_E_HASH, SH_ERR_ERR, ERR, N_("msg=<Incorrect checksum>, path=<%s>")},
606 { MSG_E_ACCESS, SH_ERR_ERR, ERR, N_("msg=<File not accessible>, userid=<%ld>, path=<%s>")},
[192]607 { MSG_E_READ, SH_ERR_ERR, ERR, N_("msg=<Not accessible or not a regular file (%s / %s)>, path=<%s>")},
[185]608 { MSG_E_NOTREG, SH_ERR_ERR, ERR, N_("msg=<Not a regular file>, path=<%s>")},
[1]609 { MSG_E_TIMEOUT, SH_ERR_ERR, ERR, N_("msg=<Timeout (%d sec) while checksumming file>, path=<%s>")},
[170]610 { MSG_NODEV, SH_ERR_ERR, ERR, N_("msg=<Device not available or timeout during read attempt>, userid=<%ld>, path=<%s>")},
[1]611 { MSG_LOCKED, SH_ERR_ERR, ERR, N_("msg=<File lock error>, userid=<%ld>, path=<%s>, obj=<%s>")},
612 { MSG_PIDFILE, SH_ERR_ERR, ERR, N_("msg=<Could not write PID file>, userid=<%ld>, path=<%s>")},
613 { MSG_NOEXEC, SH_ERR_ERR, ERR, N_("msg=<Could not execute file>, userid=<%ld>, path=<%s>")},
614
615 { MSG_ES_ENT, SH_ERR_ERR, ERR, N_("msg=<No entropy collected>, subroutine=<%s>")},
616 { MSG_ES_KEY1, SH_ERR_ERR, ERR, N_("msg=<Insecure key generation>, subroutine=<%s>")},
617 { MSG_ES_KEY2, SH_ERR_ERR, ERR, N_("msg=<Error copying key>, subroutine=<%s>")},
618 { MSG_E_GPG, SH_ERR_ERR, ERR, N_("msg=<Compiled-in gpg checksum does not match: need %s got %s>")},
619 { MSG_E_GPG_FP, SH_ERR_ERR, ERR, N_("msg=<Compiled-in fingerprint modified: one %s two %s>")},
620 { MSG_E_GPG_CHK, SH_ERR_ERR, ERR, N_("msg=<Compiled-in checksum modified: one %s two %s>")},
621 { MSG_E_SUBGEN, SH_ERR_ERR, ERR, N_("msg=<%s>, subroutine=<%s>")},
622 { MSG_E_SUBGPATH, SH_ERR_ERR, ERR, N_("msg=<%s>, subroutine=<%s>, path=<%s>")},
623 { MSG_E_UNLNK, SH_ERR_ERR, FIL, N_("msg=<%s>, interface=<unlink>, path=<%s>")},
624 { MSG_E_REGEX, SH_ERR_ERR, ERR, N_("msg=<%s>, interface=<regcomp>, regexp=<%s>")},
625 { MSG_E_OPENDIR, SH_ERR_ERR, FIL, N_("msg=<%s>, interface=<opendir>, path=<%s>")},
626 { MSG_E_TRUST1, SH_ERR_ERR, ERR, N_("msg=<%s>, subroutine=<trustfile>, path=<%s>")},
627 { MSG_E_TRUST2, SH_ERR_ERR, ERR, N_("msg=<%s>, subroutine=<trustfile>, path=<%s>, obj=<%s>")},
628 { MSG_E_PWNULL, SH_ERR_ERR, ERR, N_("msg=<Empty password file entry: %s>, subroutine=<%s>, userid=<%ld>, obj=<%s>")},
629 { MSG_E_PWLONG, SH_ERR_ERR, ERR, N_("msg=<Password file entry too long>, subroutine=<%s>, userid=<%ld>, obj=<%s>")},
630 { MSG_E_GRNULL, SH_ERR_ERR, ERR, N_("msg=<Empty groups file entry: %s>, subroutine=<%s>, group=<%ld>, obj=<%s>")},
631
632 { MSG_E_NET, SH_ERR_ERR, ENET, N_("msg=<%s>, subroutine=<%s>, service=<%s>, host=<%s>")},
633 { MSG_E_NETST, SH_ERR_ERR, ENET, N_("msg=<Invalid connection state>, expect=<%4s>, received=<%4s>")},
634 { MSG_E_NETST1, SH_ERR_ERR, ENET, N_("msg=<Invalid connection state>, expect=<%4s>, received=<%4s>, host=<%s>")},
635 { MSG_E_NLOST, SH_ERR_ERR, ENET, N_("msg=<Connection failure>, service=<%s>, obj=<%s>")},
636 { MSG_E_NEST, SH_ERR_ERR, ENET, N_("msg=<Connection reestablished>, service=<%s>, obj=<%s>")},
637
638 { MSG_EINVALHEAD, SH_ERR_WARN, EINPUT,N_("msg=<Unrecognized section heading in line %ld of configuration file>")},
639 { MSG_EINVALCONF, SH_ERR_WARN, EINPUT,N_("msg=<Invalid line %ld in configuration file: incorrect format, unrecognized option, or missing section header>")},
640 { MSG_EINVALS, SH_ERR_WARN, EINPUT,N_("msg=<Invalid input>, option=<%s>, obj=<%s>")},
641 { MSG_EINVALL, SH_ERR_WARN, EINPUT,N_("msg=<Invalid input>, option=<%s>, obj=<%ld>")},
642 { MSG_EINVALD, SH_ERR_WARN, EINPUT,N_("msg=<Configuration file: Unmatched @end>, option=<%s>, obj=<%ld>")},
643 { MSG_EINVALDD, SH_ERR_WARN, EINPUT,N_("msg=<Configuration file: Missing @end>, option=<%s>, obj=<%ld>")},
644
645 { MSG_SRV_FAIL, SH_ERR_ERR, ERR, N_("msg=<Service failure>, service=<%s>, obj=<%s>")},
646 { MSG_QUEUE_FULL, SH_ERR_ERR, ERR, N_("msg=<Queue full, messages may get lost> service=<%s>")},
647
648 { MSG_AUD_OPEN, SH_ERR_NOTICE, AUD, N_("interface=<open>, pathname=<%s>, oflag=<%ld>, mode=<%ld>, return_id=<%ld>")},
649 { MSG_AUD_DUP, SH_ERR_NOTICE, AUD, N_("interface=<dup>, file_id=<%ld>, return_id=<%ld>")},
650 { MSG_AUD_PIPE, SH_ERR_NOTICE, AUD, N_("interface=<pipe>, rd_file_id=<%ld>, wr_file_id=<%ld>")},
651 { MSG_AUD_FORK, SH_ERR_NOTICE, AUD, N_("interface=<fork>, return_id=<%ld>")},
652 { MSG_AUD_EXIT, SH_ERR_NOTICE, AUD, N_("interface=<exit>, exit_code=<%ld>")},
653 { MSG_AUD_SETUID, SH_ERR_NOTICE, AUD, N_("interface=<setuid>, uid=<%ld>")},
654 { MSG_AUD_SETGID, SH_ERR_NOTICE, AUD, N_("interface=<setgid>, gid=<%ld>")},
655 { MSG_AUD_UTIME, SH_ERR_NOTICE, AUD, N_("interface=<utime>, pathname=<%s>, atime=<%ld>, mtime=<%ld>")},
656 { MSG_AUD_EXEC, SH_ERR_NOTICE, AUD, N_("interface=<exec>, pathname=<%s>, uid=<%ld>, gid=<%ld>")},
657 { MSG_AUD_CHDIR, SH_ERR_NOTICE, AUD, N_("interface=<chdir>, pathname=<%s>")},
658 { MSG_AUD_UNLINK, SH_ERR_NOTICE, AUD, N_("interface=<unlink>, pathname=<%s>")},
659 { MSG_AUD_KILL, SH_ERR_NOTICE, AUD, N_("interface=<kill>, pid=<%ld>, sig=<%ld>")},
660
661 { MSG_ERR_OPEN, SH_ERR_ALL, ERR, N_("interface=<open>, msg=<%s>, path=<%s>, oflag=<%ld>, mode=<%ld>, return_id=<%ld>")},
662 { MSG_ERR_DUP, SH_ERR_ALL, ERR, N_("interface=<dup>, msg=<%s>, file_id=<%ld>, return_id=<%ld>")},
663 { MSG_ERR_PIPE, SH_ERR_ALL, ERR, N_("interface=<pipe>, msg=<%s>, rd_file_id=<%ld>, wr_file_id=<%ld>")},
664 { MSG_ERR_FORK, SH_ERR_ALL, ERR, N_("interface=<fork>, msg=<%s>, return_id=<%ld>")},
665 { MSG_ERR_SETUID, SH_ERR_ALL, ERR, N_("interface=<setuid>, msg=<%s>, uid=<%ld>")},
666 { MSG_ERR_SETGID, SH_ERR_ALL, ERR, N_("interface=<setgid>, msg=<%s>, gid=<%ld>")},
667 { MSG_ERR_UTIME, SH_ERR_ALL, ERR, N_("interface=<utime>, msg=<%s>, path=<%s>, atime=<%ld>, mtime=<%ld>")},
668 { MSG_ERR_EXEC, SH_ERR_ALL, ERR, N_("interface=<exec>, msg=<%s>, path=<%s>, uid=<%ld>, gid=<%ld>")},
669 { MSG_ERR_CHDIR, SH_ERR_ALL, ERR, N_("interface=<chdir>, msg=<%s>, path=<%s>")},
670 { MSG_ERR_UNLINK, SH_ERR_ALL, ERR, N_("interface=<unlink>, msg=<%s>, path=<%s>")},
671 { MSG_ERR_KILL, SH_ERR_ALL, ERR, N_("interface=<kill>, msg=<%s>, pid=<%ld>, sig=<%ld>")},
672
673 { MSG_ERR_SIGACT, SH_ERR_ALL, ERR, N_("interface=<sigaction>, msg=<%s>, sig=<%ld>")},
674 { MSG_ERR_CONNECT, SH_ERR_ALL, ERR, N_("interface=<connect>, msg=<%s>, socket_id=<%ld>, port=<%ld>, host=<%s>")},
675 { MSG_ERR_ACCEPT, SH_ERR_ALL, ERR, N_("interface=<accept>, msg=<%s>, socket_id=<%ld>")},
676 { MSG_ERR_LSTAT, SH_ERR_ALL, ERR, N_("interface=<lstat>, msg=<%s>, path=<%s>")},
677 { MSG_ERR_STAT, SH_ERR_ALL, ERR, N_("interface=<stat>, msg=<%s>, path=<%s>")},
678 { MSG_ERR_FSTAT, SH_ERR_ALL, ERR, N_("interface=<fstat>, msg=<%s>, file_id=<%ld>")},
679 { MSG_ERR_FCNTL, SH_ERR_ALL, ERR, N_("interface=<fcntl>, msg=<%s>, file_id=<%ld>, cmd=<%ld>, arg=<%ld>")},
680
681 { 0, 0, 0, NULL}
682};
683
684/* #ifdef (SH_USE_XML) */
685#endif
686
687
688
689
690
Note: See TracBrowser for help on using the repository browser.