PERFORCE change 127634 for review

[Robert Watson]

http://perforce.freebsd.org/chv.cgi?CH=127634

Change 127634 by rwatson at rwatson_fledge on 2007/10/17 20:10:23

	Add comment on requirement for synchronization between audit include
	files and audit_event.
	
	Assign sysarch to the 'other' rather than 'non-attributable' class;
	this was probably my error some point in the distant past.

Affected files ...

.. //depot/projects/trustedbsd/openbsm/etc/audit_event#26 edit

Differences ...

==== //depot/projects/trustedbsd/openbsm/etc/audit_event#26 (text+ko) ====

@@ -1,5 +1,11 @@
 #
-# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_event#25 $
+# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_event#26 $
+#
+# The mapping between event identifiers and values is also hard-codedd in
+# audit_kevents.h and audit_uevents.h, so changes must occur in both places,
+# and programs, such as the kernel, may need to be recompiled to recognize
+# those changes.  It is advisable not to change the numbering or naming of
+# kernel audit events.
 #
 0:AUE_NULL:indir system call:no
 1:AUE_EXIT:exit(2):pc
@@ -437,7 +443,7 @@
 43097:AUE_ACL_SET_LINK:acl_set_link(2):fm
 43098:AUE_ACL_DELETE_LINK:acl_delete_link(2):fm
 43099:AUE_ACL_CHECK_LINK:acl_aclcheck_link(2):fa
-43100:AUE_SYSARCH:sysarch(2):na
+43100:AUE_SYSARCH:sysarch(2):ot
 43101:AUE_EXTATTRCTL:extattrctl(2):fm
 43102:AUE_EXTATTR_GET_FILE:extattr_get_file(2):fa
 43103:AUE_EXTATTR_SET_FILE:extattr_set_file(2):fm