auparse

package

Go to main page

Versions in this module

v0

v0.4.0

Aug 30, 2018

v0.3.0

May 25, 2018

v0.2.1

May 3, 2018

v0.2.0

Apr 30, 2018

Changes in this version

type AuditMessageType

+ const AUDIT_ANOM_LOGIN_SERVICE

+ const AUDIT_FANOTIFY

+ const AUDIT_MAC_CALIPSO_ADD

+ const AUDIT_MAC_CALIPSO_DEL

+ const AUDIT_RESP_ORIGIN_BLOCK

+ const AUDIT_RESP_ORIGIN_BLOCK_TIMED

+ const AUDIT_SOFTWARE_UPDATE

+ const AUDIT_USER_DEVICE

v0.1.1

Apr 5, 2018

v0.1.0

Mar 28, 2018

v0.0.7

Jan 18, 2018

Changes in this version

type AuditMessage

+ func (m *AuditMessage) Tags() ([]string, error)

type AuditMessageType

+ func (t *AuditMessageType) UnmarshalText(text []byte) error

v0.0.6

Sep 7, 2017

v0.0.5

Jul 24, 2017

v0.0.4

Jun 27, 2017

Changes in this version

+ var AuditArchNames = map[AuditArch]string

+ var AuditErrnoToName = map[int]string

+ var AuditErrnoToNum = map[string]int

+ var AuditSyscalls = map[string]map[int]string

+ type AuditArch uint32

+ func (a AuditArch) String() string

v0.0.3

May 1, 2017

Changes in this version

type AuditMessageType

+ func (t AuditMessageType) MarshalText() (text []byte, err error)

v0.0.2

Apr 18, 2017

v0.0.1

Apr 10, 2017

Changes in this version

+ const AUDIT_ARCH_AARCH64

+ const AUDIT_ARCH_ARM

+ const AUDIT_ARCH_ARMEB

+ const AUDIT_ARCH_CRIS

+ const AUDIT_ARCH_FRV

+ const AUDIT_ARCH_I386

+ const AUDIT_ARCH_IA64

+ const AUDIT_ARCH_M32R

+ const AUDIT_ARCH_M68K

+ const AUDIT_ARCH_MIPS

+ const AUDIT_ARCH_MIPS64

+ const AUDIT_ARCH_MIPS64N32

+ const AUDIT_ARCH_MIPSEL

+ const AUDIT_ARCH_MIPSEL64

+ const AUDIT_ARCH_MIPSEL64N32

+ const AUDIT_ARCH_PARISC

+ const AUDIT_ARCH_PARISC64

+ const AUDIT_ARCH_PPC

+ const AUDIT_ARCH_PPC64

+ const AUDIT_ARCH_PPC64LE

+ const AUDIT_ARCH_S390

+ const AUDIT_ARCH_S390X

+ const AUDIT_ARCH_SH

+ const AUDIT_ARCH_SH64

+ const AUDIT_ARCH_SHEL

+ const AUDIT_ARCH_SHEL64

+ const AUDIT_ARCH_SPARC

+ const AUDIT_ARCH_SPARC64

+ const AUDIT_ARCH_X86_64

+ type AuditMessage struct

+ Data map[string]string

+ Error error

+ RawData string

+ RecordType AuditMessageType

+ Sequence int

+ Timestamp time.Time

+ func Parse(typ AuditMessageType, message string) (*AuditMessage, error)

+ func ParseLogLine(line string) (*AuditMessage, error)

+ func (m *AuditMessage) ToMapStr() map[string]string

+ type AuditMessageType uint16

+ const AUDIT_AA

+ const AUDIT_ACCT_LOCK

+ const AUDIT_ACCT_UNLOCK

+ const AUDIT_ADD

+ const AUDIT_ADD_GROUP

+ const AUDIT_ADD_RULE

+ const AUDIT_ADD_USER

+ const AUDIT_ANOM_ABEND

+ const AUDIT_ANOM_ACCESS_FS

+ const AUDIT_ANOM_ADD_ACCT

+ const AUDIT_ANOM_AMTU_FAIL

+ const AUDIT_ANOM_CRYPTO_FAIL

+ const AUDIT_ANOM_DEL_ACCT

+ const AUDIT_ANOM_EXEC

+ const AUDIT_ANOM_LINK

+ const AUDIT_ANOM_LOGIN_ACCT

+ const AUDIT_ANOM_LOGIN_FAILURES

+ const AUDIT_ANOM_LOGIN_LOCATION

+ const AUDIT_ANOM_LOGIN_SESSIONS

+ const AUDIT_ANOM_LOGIN_TIME

+ const AUDIT_ANOM_MAX_DAC

+ const AUDIT_ANOM_MAX_MAC

+ const AUDIT_ANOM_MK_EXEC

+ const AUDIT_ANOM_MOD_ACCT

+ const AUDIT_ANOM_PROMISCUOUS

+ const AUDIT_ANOM_RBAC_FAIL

+ const AUDIT_ANOM_RBAC_INTEGRITY_FAIL

+ const AUDIT_ANOM_ROOT_TRANS

+ const AUDIT_APPARMOR_ALLOWED

+ const AUDIT_APPARMOR_AUDIT

+ const AUDIT_APPARMOR_DENIED

+ const AUDIT_APPARMOR_ERROR

+ const AUDIT_APPARMOR_HINT

+ const AUDIT_APPARMOR_STATUS

+ const AUDIT_AVC

+ const AUDIT_AVC_PATH

+ const AUDIT_BPRM_FCAPS

+ const AUDIT_CAPSET

+ const AUDIT_CHGRP_ID

+ const AUDIT_CHUSER_ID

+ const AUDIT_CONFIG_CHANGE

+ const AUDIT_CRED_ACQ

+ const AUDIT_CRED_DISP

+ const AUDIT_CRED_REFR

+ const AUDIT_CRYPTO_FAILURE_USER

+ const AUDIT_CRYPTO_IKE_SA

+ const AUDIT_CRYPTO_IPSEC_SA

+ const AUDIT_CRYPTO_KEY_USER

+ const AUDIT_CRYPTO_LOGIN

+ const AUDIT_CRYPTO_LOGOUT

+ const AUDIT_CRYPTO_PARAM_CHANGE_USER

+ const AUDIT_CRYPTO_REPLAY_USER

+ const AUDIT_CRYPTO_SESSION

+ const AUDIT_CRYPTO_TEST_USER

+ const AUDIT_CWD

+ const AUDIT_DAC_CHECK

+ const AUDIT_DAEMON_ABORT

+ const AUDIT_DAEMON_ACCEPT

+ const AUDIT_DAEMON_CLOSE

+ const AUDIT_DAEMON_CONFIG

+ const AUDIT_DAEMON_END

+ const AUDIT_DAEMON_ERR

+ const AUDIT_DAEMON_RECONFIG

+ const AUDIT_DAEMON_RESUME

+ const AUDIT_DAEMON_ROTATE

+ const AUDIT_DAEMON_START

+ const AUDIT_DEL

+ const AUDIT_DEL_GROUP

+ const AUDIT_DEL_RULE

+ const AUDIT_DEL_USER

+ const AUDIT_DEV_ALLOC

+ const AUDIT_DEV_DEALLOC

+ const AUDIT_EOE

+ const AUDIT_EXECVE

+ const AUDIT_FD_PAIR

+ const AUDIT_FEATURE_CHANGE

+ const AUDIT_FIRST_KERN_CRYPTO_MSG

+ const AUDIT_FS_RELABEL

+ const AUDIT_GET

+ const AUDIT_GET_FEATURE

+ const AUDIT_GRP_AUTH

+ const AUDIT_GRP_CHAUTHTOK

+ const AUDIT_GRP_MGMT

+ const AUDIT_INTEGRITY_DATA

+ const AUDIT_INTEGRITY_HASH

+ const AUDIT_INTEGRITY_LAST_MSG

+ const AUDIT_INTEGRITY_METADATA

+ const AUDIT_INTEGRITY_PCR

+ const AUDIT_INTEGRITY_RULE

+ const AUDIT_INTEGRITY_STATUS

+ const AUDIT_IPC

+ const AUDIT_IPC_SET_PERM

+ const AUDIT_KERNEL

+ const AUDIT_KERNEL_OTHER

+ const AUDIT_KERN_MODULE

+ const AUDIT_LABEL_LEVEL_CHANGE

+ const AUDIT_LABEL_OVERRIDE

+ const AUDIT_LAST_ANOM_MSG

+ const AUDIT_LAST_ANOM_RESP

+ const AUDIT_LAST_APPARMOR

+ const AUDIT_LAST_CRYPTO_MSG

+ const AUDIT_LAST_DAEMON

+ const AUDIT_LAST_EVENT

+ const AUDIT_LAST_KERN_ANOM_MSG

+ const AUDIT_LAST_KERN_CRYPTO_MSG

+ const AUDIT_LAST_SELINUX

+ const AUDIT_LAST_USER_LSPP_MSG

+ const AUDIT_LAST_USER_MSG

+ const AUDIT_LAST_USER_MSG2

+ const AUDIT_LAST_VIRT_MSG

+ const AUDIT_LIST

+ const AUDIT_LIST_RULES

+ const AUDIT_LOGIN

+ const AUDIT_MAC_CHECK

+ const AUDIT_MAC_CIPSOV4_ADD

+ const AUDIT_MAC_CIPSOV4_DEL

+ const AUDIT_MAC_CONFIG_CHANGE

+ const AUDIT_MAC_IPSEC_ADDSA

+ const AUDIT_MAC_IPSEC_ADDSPD

+ const AUDIT_MAC_IPSEC_DELSA

+ const AUDIT_MAC_IPSEC_DELSPD

+ const AUDIT_MAC_IPSEC_EVENT

+ const AUDIT_MAC_MAP_ADD

+ const AUDIT_MAC_MAP_DEL

+ const AUDIT_MAC_POLICY_LOAD

+ const AUDIT_MAC_STATUS

+ const AUDIT_MAC_UNLBL_ALLOW

+ const AUDIT_MAC_UNLBL_STCADD

+ const AUDIT_MAC_UNLBL_STCDEL

+ const AUDIT_MAKE_EQUIV

+ const AUDIT_MMAP

+ const AUDIT_MQ_GETSETATTR

+ const AUDIT_MQ_NOTIFY

+ const AUDIT_MQ_OPEN

+ const AUDIT_MQ_SENDRECV

+ const AUDIT_NETFILTER_CFG

+ const AUDIT_NETFILTER_PKT

+ const AUDIT_OBJ_PID

+ const AUDIT_PATH

+ const AUDIT_PROCTITLE

+ const AUDIT_REPLACE

+ const AUDIT_RESP_ACCT_LOCK

+ const AUDIT_RESP_ACCT_LOCK_TIMED

+ const AUDIT_RESP_ACCT_REMOTE

+ const AUDIT_RESP_ACCT_UNLOCK_TIMED

+ const AUDIT_RESP_ALERT

+ const AUDIT_RESP_ANOMALY

+ const AUDIT_RESP_EXEC

+ const AUDIT_RESP_HALT

+ const AUDIT_RESP_KILL_PROC

+ const AUDIT_RESP_SEBOOL

+ const AUDIT_RESP_SINGLE

+ const AUDIT_RESP_TERM_ACCESS

+ const AUDIT_RESP_TERM_LOCK

+ const AUDIT_ROLE_ASSIGN

+ const AUDIT_ROLE_MODIFY

+ const AUDIT_ROLE_REMOVE

+ const AUDIT_SECCOMP

+ const AUDIT_SELINUX_ERR

+ const AUDIT_SERVICE_START

+ const AUDIT_SERVICE_STOP

+ const AUDIT_SET

+ const AUDIT_SET_FEATURE

+ const AUDIT_SIGNAL_INFO

+ const AUDIT_SOCKADDR

+ const AUDIT_SOCKETCALL

+ const AUDIT_SYSCALL

+ const AUDIT_SYSTEM_BOOT

+ const AUDIT_SYSTEM_RUNLEVEL

+ const AUDIT_SYSTEM_SHUTDOWN

+ const AUDIT_TEST

+ const AUDIT_TRIM

+ const AUDIT_TRUSTED_APP

+ const AUDIT_TTY

+ const AUDIT_TTY_GET

+ const AUDIT_TTY_SET

+ const AUDIT_USER

+ const AUDIT_USER_ACCT

+ const AUDIT_USER_AUTH

+ const AUDIT_USER_AVC

+ const AUDIT_USER_CHAUTHTOK

+ const AUDIT_USER_CMD

+ const AUDIT_USER_END

+ const AUDIT_USER_ERR

+ const AUDIT_USER_LABELED_EXPORT

+ const AUDIT_USER_LOGIN

+ const AUDIT_USER_LOGOUT

+ const AUDIT_USER_MAC_CONFIG_CHANGE

+ const AUDIT_USER_MAC_POLICY_LOAD

+ const AUDIT_USER_MGMT

+ const AUDIT_USER_ROLE_CHANGE

+ const AUDIT_USER_SELINUX_ERR

+ const AUDIT_USER_START

+ const AUDIT_USER_TTY

+ const AUDIT_USER_UNLABELED_EXPORT

+ const AUDIT_USYS_CONFIG

+ const AUDIT_VIRT_CONTROL

+ const AUDIT_VIRT_CREATE

+ const AUDIT_VIRT_DESTROY

+ const AUDIT_VIRT_INTEGRITY_CHECK

+ const AUDIT_VIRT_MACHINE_ID

+ const AUDIT_VIRT_MIGRATE_IN

+ const AUDIT_VIRT_MIGRATE_OUT

+ const AUDIT_VIRT_RESOURCE

+ const AUDIT_WATCH_INS

+ const AUDIT_WATCH_LIST

+ const AUDIT_WATCH_REM

+ func GetAuditMessageType(name string) (AuditMessageType, error)

+ func (t AuditMessageType) String() string

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL