| Current Path : /usr/lib/ |
FreeBSD hs32.drive.ne.jp 9.1-RELEASE FreeBSD 9.1-RELEASE #1: Wed Jan 14 12:18:08 JST 2015 root@hs32.drive.ne.jp:/sys/amd64/compile/hs32 amd64 |
| Current File : //usr/lib/libbsm_p.a |
!<arch>
/ 1354609170 0 0 0 2770 `
f f f f f f f f % , : : : : : : z z ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ r r f f f f f f f f J> J> J> y y y y y y getfauditflags setauuser getauusernam_r au_user_mask getauusernam getauuserent_r getauuserent endauuser cannot_audit au_preselect au_print_xml_footer au_print_xml_header au_print_tok_xml au_print_tok au_read_rec au_fetch_tok au_fcntl_cmd_to_bsm au_bsm_to_fcntl_cmd setauevent getauevnum_r getauevnum getauevent_r getauevent getauevnam_r getauevnonam_r getauevnonam getauevnam endauevent endac setac getacexpire getacfilesz getachost getacpol getacna getacflg getacdir getacmin au_strtopol au_poltostr getauditflagschar getauditflagsbin endauclass setauclass getauclassnum_r getauclassnum getauclassent getauclassent_r getauclassnam_r getauclassnam audit_get_car audit_get_cwd audit_send_trigger audit_set_stat audit_get_stat audit_get_sinfo_addr audit_get_pinfo_addr audit_get_pinfo audit_set_pmask audit_set_fsize audit_get_fsize audit_set_kmask audit_get_kmask audit_set_class audit_get_class audit_set_kaudit audit_get_kaudit audit_set_qctrl audit_get_qctrl audit_set_policy audit_get_policy audit_set_cond audit_get_cond audit_write audit_write_failure_self audit_write_failure audit_write_failure_na audit_write_success_self audit_write_success audit_set_terminal_host audit_set_terminal_port audit_set_terminal_id audit_submit au_errno_to_bsm au_bsm_to_errno au_strerror au_write au_free_token au_close_token au_close_buffer au_close au_open au_to_header32_tm au_to_return32 au_to_return au_to_newgroups au_to_groups au_to_header32 au_to_header au_to_header32_ex_tm au_to_header32_ex au_to_header_ex au_to_subject32_ex au_to_subject_ex au_to_subject32 au_to_subject au_to_sock_inet32 au_to_sock_inet au_to_process32_ex au_to_process_ex au_to_process32 au_to_process au_to_ip au_to_in_addr au_to_data au_to_sock_unix au_to_arg32 au_to_arg au_to_me au_to_arg64 au_to_zonename au_to_sock_inet128 au_to_socket_ex au_to_path au_to_text au_to_opaque au_to_iport au_to_trailer au_to_exec_env au_to_exec_args au_to_ipc_perm au_to_ipc au_to_in_addr_ex au_to_exit au_to_seq au_to_file au_to_header64_tm au_to_header64 au_to_subject64_ex au_to_subject64 au_to_return64 au_to_process64_ex au_to_process64 au_socket_type_to_bsm au_bsm_to_socket_type au_domain_to_bsm au_bsm_to_domain // 20 `
bsm_socket_type.po/
bsm_user.po/ 1354609170 0 0 100644 6512 `
ELF > X @ @ UHH]LeLmLuH0 H HE1HHIIteHt`Ht[L B L t'A $CA D$AE A!$AEA!D$1LL tʸHUH3 uH]LeLmLu UH H= Ht 11 UH ɿ f D UHAWAVAUATSH H= I H Htp
Ht = #tL% H]п HL H1LI H1LI MHt
MtH u6E1HL[A\A]A^A_þ HH AL H1wI>2 L IvL tIvH uf D UHATS HHItG JHHt!H3L u H[A\ÿ 1H[A\ UHATSHp HUI H HE1HLHHLHDž HDž Hf L Ht0HpHxH tC1HUH3 u;Hp [A\L L uHL uf D f D UH H 1HH HH f H UHSH H H
H HH[f D UH 1HH H f H fUH H= Ht H ɿ r /etc/security/audit_user : zR x $ AC
W D " AC
d # AC
$ * AC
M h AC
C AC
J P AC
: AC
E , N AC
L : AC
GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rela.text .data .bss .rodata.str1.1 .rela.rodata .rela.eh_frame .comment .note.GNU-stack @
& , 1 2 E @ @ h
R H h M
\ - e u 8 " ` X & 0 * < D O 2 b i 2 | p
# & , 3 ; ` h J Q ^ P k : z @ N : bsm_user.c setauuser_locked fp mutex getauuserent_r_locked linestr user_delim user_ent_name.4796 u.4797 user_ent_name.4777 u.4778 getfauditflags .mcount __stack_chk_guard getacflg getauditflagsbin __stack_chk_fail fseek setauuser pthread_mutex_lock pthread_mutex_unlock fgets strrchr strtok_r fopen strlen strlcpy getauusernam_r strcmp au_user_mask getauusernam getauuserent_r getauuserent endauuser fclose # b \
X
X B I [ Z \ d
i x
}
! \ " 2 # > O h x
X } %
X
X 6 $ K ]
J
X $
X , E K
\ p g x p
p w h
X \ + X
X $ (
H
h
0
`
0
@ P
bsm_notify.po/ 1354609170 0 0 100644 1880 `
ELF > @ @
UHH H} uE ɉ 8N t 8 H¿ 1 ɺ Audit status check failed (%s) zR x j AC
GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rela.text .data .bss .rodata.str1.8 .rela.eh_frame .comment .note.GNU-stack @ j & , 1 2 E 8 @ @ O - X 5 5 h h H J j # 2 : C bsm_notify.c cannot_audit .mcount audit_get_cond __error strerror syslog
3 B I
N
]
bsm_mask.po/ 1354609169 0 0 100644 3376 `
ELF > @ @ UH H Hu H@pHtf9PP uHP1 @ UH UH H= Ht)HWpHtHGxHBxHGxHH= HuUHSH H P1 H HC H{PH[XHC` HtGH HHSptHCpHBxH HCx HHu9fH H[f D f D UHH]LeLmLuL}H0 HIAAtL uFAeHHt:1AuUAu? 1H]LeLmLuL}Ãt3 fAD$#B @ A $#XAt;vm NA@ Db zR x < AC
< AC
\ @ AC
| AC
E $ AC
X GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rela.text .data .bss .rela.eh_frame .comment .note.GNU-stack @ `
& , 6 1 x
@ h - I Y @ 0 < % @ : P @ F W ] g o t @ bsm_mask.c read_from_cache ev_cache audit_event_map_free flush_cache load_event_table mutex firsttime .mcount free setauevent memset getauevent_r malloc au_preselect pthread_mutex_lock pthread_mutex_unlock E U \ ] w
|
&
+ 5 O
T K
@
@ `
P
@ bsm_io.po/ 1354609169 0 0 100644 82040 `
ELF > ȭ @ @ UH H UHSH HH HHٺ [ɾ D f D UH H UH ҉u@t;@tM@tо 1 H f D H H
UH ɉ1 UH tɉ1 ɉ1 UH tɉ1 @ ɉ1 UH 1 UH H1 UHH]LeLmLuH HIIIuH $Ld$Ll$Lt$H 1 1 D B01 L I9wUH HHH1 f D UH HЉH1 UH HH1 f D UH H@H1 D UHSH EHt<qv2H[ÄtH@1[ɾ HHH[ $ H HHٺ [ɾ HH [ɾ HH [ɾ HH
[ɾ HH [ɾ HH [ɾ HH [ɾ HH [ɾ HH [ɾ HH [ɾ HH [ɾ HH
[ɾ HH [ɾ HH [ɾ HH [ɾ HH
[ɾ HH [ɾ HH [ɾ HH [ɾ HH [ɾ HH
[ɾ HH
[ɾ HH [ɾ HH [ɾ HH [ɾ HH
[ɾ f D f D UH HHH UHH]LeLmH EIHItH]LeLm6 E1(LLSHs LH]LeLm UHH]LeLmLuH I6DIEȺ ItH $Ld$Ll$Lt$LLAu LH $Ld$Ll$ Lt$ D f D UH F<qv$ @ H H> H
H H H
H H H H H H f. UHH]LeLmLuH I6DIEȺ ItGL AuL rLZAu LH $Ld$Ll$Lt$9LLAuLH $Ld$Ll$ Lt$f UHH]LeLmLuH I6DIEȺ I4t4AT$It$ L A4$LH $Ld$Ll$Lt$LLaAt$ LLLCAT$It$ LH $Ld$Ll$Lt$f D f D UHH]LeLmLuH I6DIEȺ Idt@At$L fA4$LH $Ld$Ll$Lt$ D LLAt$LH $Ld$Ll$ Lt$f UHH]LeLmLuL}H0 I6DDIED ItlL kAvDL;LL FAv L LA6LH]LeLmLuL}LLAvDLLLvAv LH]LeLm LuL}UHH]LeLmLuH I6DIEȺ IthL sAuLLL RAu L LAu LH $Ld$Ll$Lt$LLAuLaLLAu LH $Ld$Ll$ Lt$UHH]LeLmLuH HIIIt511
I9v%B(tL I9w H $Ld$Ll$Lt$ D f D UHH]LeLmLuH I6DIEȺ I4tGL AUIu L"LAu LH $Ld$Ll$Lt$yLLNAUIu LH $Ld$Ll$Lt$f UHH]LeLmLuH I6DIEȺ Itt4AT$It$ LmA4$LH $Ld$Ll$Lt$LLAT$It$ LH $Ld$Ll$Lt$f. UHH]LeLmLuH I6DIEȺ It4AT$It$ LA4$LH $Ld$Ll$Lt$ LLAT$It$ LH $Ld$Ll$Lt$jf. UHH]LeLmLuH I6DIEȺ I L Au LLuL Iu LGLOL AU(Iu0LL)Au LH $Ld$Ll$Lt$LLAu L;LLIu LLLAU(Iu0LH $Ld$Ll$Lt$ UHH]LeLmLuH I6DIEȺ I L Au L}L%L hAu LLL BAU Iu(LaLAu LH $Ld$Ll$Lt$LLAu LLLpAu LLLTAU Iu(LH $Ld$Ll$Lt$ UHH]LeLmLuH AHpIH HE1HAι HLPLEމHDžP HDžh HE HE HE E fE LXf LH` Ht`EuHE @ u.H`L HEH3 uGH]LeLmLuHXL Љھ L1 뽉ھ L f D UHH]LeHP H HE1It' HEH3 u3H]Le @ H]H}HuH LHE f D UHH]LeLmLuL}H0 DEI6DDIED I L Au LqLL \MAu DLLL 3Au DLLL Iu(DLLL Iu0DL[LAu LH]LeLmLuL}aLL5Au LTLLAu LwLLMAu DLLLAu DL LLIu(DLLLIu0DLH]LeLmLuL}t @ UHH]LeHP H HE1It' HEH3 u5H]Le @ H]H}HuH LHE @ UHH]LeLmLuL}H0 I6DDIED IL L AuDLLL Au DLLL> AU Iu(LAu LH]LeLmLuL}LLL!AuDLLLAu DLLLAU Iu(LH]LeLmLuL}g UHH]LeLmLuL}H0 DEI6DDIED I L Au LLiL MAu DLL@L Au DLSLL ^Au$DL_LL :Au(L LAu LH]LeLmLuL}LLAu LLLhAu LLLKMAu DLLL,Au DLlLLAu$DLLLAu(DLH]LeLmLuL} UHATSH` HIH HU1҃t8tcH HEH3 uyH`[A\f D HuHU. E LH H]HǺ H HUH. LH z UHAVAUATS I6DIEȺ Ia L ,Au LLL Au LLL Au LfLmL Au IU L_LGL Au IU4L9L!L dAu0L f+L[LAu A\A]A^LLAu LLLAu LLLyAu LfLLUAu IU LtLL9Au0 LfPLL[LAu IU4A\A]A^,f D f D UHH]LeLmLuH I6DIEȺ IDt3At$IT$ LA4$LH $Ld$Ll$Lt$LLrAt$IT$ LH $Ld$Ll$Lt$|f D f D UHH]LeLmLuL}H0 DEI6DDIED I L SAu LALL ,MAu DLLL Au DLLL Au$IU(LLvL Iu8DLJLRL Iu@DLL.Au LH]LeLmLuL} LLAu L LLAu L#LLMAu DLtLLAu DLLLnAu$IU(LLLSIu8DLTLL9Iu@DLH]LeLmLuL} D UHH]LeLmLuL}H0 DEI6DDIED IX L #Au LLL MAu DLXLL Au DLLkL Au$IU(L^LFL Au8DLL"L eAu<DLLAu LH]LeLmLuL}LLAu LLLAu LLLxMAu DLDLLYAu DLLL>Au$IU(L^LL#Au8DLLL Au<DLH]LeLmLuL} D UHH]LeLmLuH I6DIEȺ I4 L I]Au LL LL| LH HLHLQAu LH $Ld$Ll$Lt$0LLI]Au L?LLH HLH $Ld$Ll$HLt$Zf. UHAWAVAUATSH HUI6EȺ IE
AF E1VL DAI\ H HHLL E9nv9EuHuLDAI\ H HHLE9nwEuH[A\A]A^A_A6HL[A\A]A^A_f D f D UHAWAVAUATSH HUI6 EIEAV E1VL DAI\ H HHLL E9nv9EuHuLDAI\ H HHLpE9nwEuH[A\A]A^A_A6HL[A\A]A^A_f D f D UHAWAVAUATSH H6EIEȺ IE {wtC$ LLL$s LLL{ t*E1HC HuLB(1 CAUI9H[A\A]A^A_LLgA HE E LLL LC< E& L L1 L^ Ls LL8L> { t,E1fHC HuLB(1 CAUI93HL[A\A]A^A_EA HE L LHL3LLC<E L L1 Lj Ls LLDL> { 4E1E1 HC HuLAB(1I CD9A HE A HE A HE < <E L L1 Lx Ls LLRL> { BE1E1 D HC HuLAJ(1I CD9 E L= L1 L Ls LLL> { E1E1HC HuLAB(1I CD9i LLL%s LLL { 'E1E1HC HuLAB(1I CD9 L[LLs LLL{ E1E1 @ HC HuLAJ(1I CD9| LLL7s LLL{ 9E1E1HC HuLAB(1I CD9 UHH]LeH Iu" HtLH8H $Ld$ LH $Ld$ɾ 1 D UHH]LeH Iu" HtLH8H $Ld$ LH $Ld$ɾ 1 D UHAWAVAUATSH I6DDIED IgQ L 2AuDLLL Au DLLL Au DLLL Au$DLwL_L Au(DLL;L ~Au, L-LL XAu0 LLL 2Iu8L Au@IUDLLAu HL[A\A]A^A_LLsAuDLLLYAu DLzLL?Au DLLL%Au$DLFLL Au(DLLLAu, LLLAu0 LLLIu8 LLLAu@HL[A\IUDA]A^A_ UHAWAVAUATSH I6DDIED IQ L AuDLCL+L nAu DL LL JAu DL[LL &Au$DLLL Au(DLLL Au, LLuL Au0 LgLOL Au4L AAu8IU<L1LAu HL[A\A]A^A_LLAuDLLLAu DLLLAu DL LLAu$DLLLkAu(DLLLQAu, LpLL5Au0 LTLLAu4 L8LLAu8HL[A\IU<A]A^A_ UHAWAVAUATSH I6DDIED I'Q L AuDLLL Au DLLgL Au DLLCL Au$DL7L L bAu(DLsLL >Au, LLL Au0 LLL Iu8L Au@IUDLLyAu HL[A\A]A^A_^LL3AuDLTLLAu DL:LLAu DLLLAu$DLLLAu(DLLLLAu, LLLAu0 LLLyIu8 LxLL]Au@HL[A\IUDA]A^A_o UHAWAVAUATSH I6DDIED IQ L RAuDLLL .Au DLLL
Au DLLL Au$DLLL Au(DLL[L Au, LML5L xAu0 L'LL RAu4L Au8IU<LLAu HL[A\A]A^A_LLAuDLLLyAu DLLL_Au DLLLEAu$DLfLL+Au(DLLLAu, L0LLAu0 LLLAu4 LLLAu8HL[A\IU<A]A^A_ UHH]LeLmLuL}H0 I6DDIED I$ L AuDLXL@L Au DLL L _Au DLLL ;Au$DLLLL Au( LLL Au, LLL Au0L zLbAu LH]LeLmLuL}@LLAuDL6LLAu DL|LLAu DLLLAu$DLHLLAu( LLLAu, LLLuAu0LH]LeLm LuL} UHAWAVAUATSH HUIDM6DED HfA~ ME1]Hٺ At$ DHY Hٺ A6HAFAID9~%M̅uHuHAt$ DHH[A\A]A^A_UHH]LeLmLuL}H0 I6DDIED I L wAu L&LL QAu DLLL -Au DL>LL Au$ LLL Iu( LrLzL Iu0L LLTAu LH]LeLmLuL}2fLLAu L$LLAu DL
LLAu DLPLLAu$ LLLIu( LLL}Iu0LH]LeLm LuL}g UHH]LeLmLuL}H0 I6DDIED I L gAu LLL AAu DLLL Au DL.LL Au$ LLL Iu( LbLjL Au0L \LDAu LH]LeLmLuL}"fLLAu LLLAu DLLLAu DL@LLAu$ LLLIu( LLLmAu0LH]LeLm LuL}w UHSH H HHH[ UHAWAVAUATSH I6DDIED IgO L 2AuDLLL Au DLLL Au DLLL Au$DLwL_L Au(DLL;L ~Au, L-LL XAu0 LLL 2Iu8 LAu@LeLAu HL[A\A]A^A_fLLuAuDLLL[Au DL|LLAAu DLLL'Au$DLHLL
Au(DLLLAu, LLLAu0 LLLIu8L LLAu@HL[A\A]A^A_E D UHAWAVAUATSH I6DDIED IO L AuDLSL;L ~Au DL/LL ZAu DLkLL 6Au$DLLϿL Au(DL#L諿L Au, LL腿L Au0 LwL_L Au4 LQAu8LL-Au HL[A\A]A^A_fLLAuDLLLAu DLLLAu DL2LLAu$DLLL}Au(DLLLcAu, LLLGAu0 LfLL+Au4L JLLAu8HL[A\A]A^A_ D UHAVAUATS I6DIEȺ IQ L Au LL貽L Au Lf輿L脽L ǾAu L LcL 覾Au LfmL5L xAu$LL[LAu A\A]A^LLAu LLLAu LfLLAu LGLL|Au L f賾LLX[LAu$A\A]A^ @ UHH]LeLmLuH I6DIEȺ I蔾 L _Au L-LL 8Au LfLǻL
Au LNL覻Au LH $Ld$Ll$Lt$ D LLUAu L蓽LL8AuL foLLAu LH $Ld$Ll$Lt$ @ UHAWAVAUATSH I6DDIED IGO L AuDLL諺L Au DLL臺L ʻAu DLLcL 覻Au$DLWL?L 肻Au(DLLL ^Au, L
LL 8Au0 LLϹL Iu8 L衻Au@LEL蝹Au HL[A\A]A^A_fLLUAuDLvLL;Au DL\LL!Au DLLLAu$DL(LLAu(DLnLLӾAu, LLL跾Au0 LֺLL蛾Iu8L 蚺LLAu@HL[A\A]A^A_% D UHAWAVAUATSH I6DDIED I跺O L 肹AuDL3LL ^Au DLLL :Au DLKLӷL Au$DLL请L Au(DLL苷L θAu, L}LeL 訸Au0 LWL?L 肸Au4 L1Au8LL
Au HL[A\A]A^A_fLLżAuDLLL諼Au DLLL葼Au DLLLwAu$DLLL]Au(DLLLCAu, LbLL'Au0 LFLL Au4L *LLAu8HL[A\A]A^A_ D UHAVAUATS I6DIEȺ I1 L Iu L L蓵L ֶIu LLmL 谶Au LfwL?L 肶Au LfILL TAu LfLL &Iu L5L轴L Iu! LL藴L ڵAu" Lf衶LiL 謵Au$LLHL 苵Au(LL'[LAu A\A]A^fLLIu LdLLɹIu LHLL譹Au LfLL艹Au LfLLeAu Lf蜵LLAIu LLL%Iu! L褴LL Au" Lf@LLAu$LLLθ[LAu(A\A]A^zf. UHH]LeLmLuH I6DIEȺ It0At$L#A4$LH $Ld$Ll$Lt$bfLL5At$LH $Ld$Ll$Lt$ @ UHH]LeH Ht@1 H]LeDHuD uI}u!Hٺ H]Le HH¾ 1 H]LeDH߾ 1 H]LeÐUHH]LeLmLuL}H0 I6DDIED I謳tlL {AvDLLL VIv L LA6LH]LeLmLuL}̷LL衶AvDLLL膶Iv LH]LeLm LuL}pUHH]LeLmLuL}H0 I6DDIED I謲tlL {AvDLLL VAv L LA6LH]LeLmLuL}̶LL衵AvDLLL膵Av LH]LeLm LuL}鐱UH <qvA EZ$ A E=A EA EA EA EA EA E{A E(A EEA EA EOA EA EA EA ESA E A E靹A EA EA EA EaA EA E۵A ExA EA E2A E_A ElA E)A EֺA EA EpA E=A E:A EGA EA EaA EA E۲A E8 UHH]LeLmH IIHʃ<qv%HLLH]LeLmE1E$ LH]LeLmE1EE1 /LL蔱s LӭLLxs Lf谭LLUHS LH]LeLm gLH]LeLmE1ELH]LeLmE1ELH]LeLmE1ELH]LeLmE1ELH]LeLmE1ELH]LeLmE1EMLH]LeLmE1ELH]LeLmE1ELH]LeLmE1E0LH]LeLmE1ELH]LeLmE1ErLH]LeLmE1EcLH]LeLmE1EDLH]LeLmE1EŸLH]LeLmE1E醶LH]LeLmE1ELH]LeLmE1ELH]LeLmE1EYLH]LeLmE1EJLH]LeLmE1ELH]LeLmE1E LH]LeLmE1ELH]LeLmE1E~LH]LeLmE1E߸LH]LeLmE1E LH]LeLmE1EALH]LeLmE1EBLH]LeLmE1ELH]LeLmE1E锵LH]LeLmE1E5LH]LeLmE1ELH]LeLmE1ELH]LeLmE1EȵLH]LeLmE1EɱLH]LeLmE1EjLH]LeLmE1ELH]LeLmE1ELH]LeLmE1E-LH]LeLmE1E~ UH HOAHAL9vɸH1@ HHfGHBHWI9r2HHWfGHBI9r2HGG 1UH HOAHAL9vɸHQ A A WHWHHBHWI9rH 2Q A A W HWHHBHWI9rH 2Q A A W HWHHBHWI9HH 2Q A A W$HWHHBHWI9
H 2Q A A W(HWHHBHWI9H 2Q A A W,HWHHBHWI9H 2Q A A W0HWHHBHWI9PH 2Q A A W4HWHHBHWI9HJ B BHWHHW O8t2HBI9H2HHW<H@HGHGD1HBI92HGG<1f D UH HOAHAL9vɸHQ A A WHWHHBHWI9rH 2Q A A W HWHHBHWI9rH 2Q A A W HWHHBHWI9HH 2Q A A W$HWHHBHWI9
H 2Q A A W(HWHHBHWI9H 2Q A A W,HWHHBHWI9H 2Q A A W0HWHHBHWI9PH 2Q A A W4HWHHBHWI92HGG81f. UH HOAHAH9w1HGE1fGDf D UH HOHAH9vɸ1HHOGHAH9r1HHOGHAH9r1HHOfGHAH9r1HHOfG HAH9r1HHOfG HAH9z1HHOG HAH9^1HHOG!HAH9B1HHOfG"HAH9%1HHOG$HAH9
1HGG(1 UH HOAHAL9w;H1J B BHWHHW Ott$ɸ D HBI9r2HGG 1HBI9rH2HHW H@HGHG$1 UH HOAHAH9w1HGE1GD UH HOAHAL9vɸHQ A A WHWHHBHWI9r2HHWG HBI9rH2@ HWfG HHBHWI9{H2@ HWfG HHBHWI9NH 2Q A AHO(HGHG( W$HA G$ HWE1HBI9H 2Q A A W8HWHEHWHBI9H 2Q A AHG 1W<HWHBI9a2E1HHWG(WHWA HBI9@H2E0HHW(H@HAHWHHW @ UHH]LeLmLuL}H0 HOAHHAL9vH]LeLmLuL}H1IAi I@Mt5 Lo1 кh fGL Ht D)LcK/I9rH{LL L{1f. UHH]LeLmLuL}H@ II <E < H}L H EȃE HII U1H EIT$I|$L A$]ЉAD$؈ZBBH H9@ I> % D <t7<y/ H]LeLmLuL}<uH}L HvL}L L HvLeL L Hx}f }Љ HHItnEHsH}̺ Hs L Hs L UH{ L f UfH9rEL UH HOAIHAL9vɸHQ A A WHWHHBHWI9r2HHWG HBI9rH2@ HWfG HHBHWI9{H2@ HWfG HHBHWI9NH 2Q A AHO(HGHG( W$HA G$ HWE1HBI9J4
HVFJ B BV F F H H HWHO8HEHWHBI9uJ4
HVFJ B BV F FHG 1H H HO@HWHBI9 2E1HHWG(HWA HBI9H2E0HHW(H@HAHWHHW D f D UH HOAIHAL9vɸHQ A A WHWHHBHWI9rH 2Q A A W HWHHBHWI9rH 2Q A A W HWHHBHWI9HH 2Q A A W$HWHHBHWI9
H 2Q A A W(HWHHBHWI9H 2Q A A W,HWHHBHWI9H 2Q A A W0HWHHBHWI9PH42HVFJ B BV F F H H HWHO8HHBHWI9LJ B BHWHHW O@t2HBI9J
HHWDH@HGHGL1HBI9sB
HGGD1 UH HOAIHAL9vɸHQ A A WHWHHBHWI9rH 2Q A A W HWHHBHWI9rH 2Q A A W HWHHBHWI9HH 2Q A A W$HWHHBHWI9
H 2Q A A W(HWHHBHWI9H 2Q A A W,HWHHBHWI9H 2Q A A W0HWHHBHWI9PH42HVFJ B BV F F H H HWHO8HHBHWI9B
HGG@1 D f D UH IAA~WHG Hw<qvDHOD)ȃ HcfGDHH9 HwJHG E1 D D$ HWDHBH9 I@ HWfGHHHWH9 HOJE1HG HWEHBL9] H Q A A WHWHHBHWI9 H Q A A W HWHHBHWI9 H Q A A W HWHHBHWI9 H Q A A W$HWHHBHWI9riH4HVFJ B BV F F H H HWHO(HHBHWI9 ADHOHAH9wA
HHHWGHBH9rI E1Q A AHG W HWEHBL9wHHWGHBI9lH4HVFJ B BV F F H H HWHO HHBHWI9I@ HWfG(HHHWI9HOJE1HG0HWEHBL9H@ HWfGHHBHWI9xHHWfGHBI9[HE1HHW H@HGHG$ff D HOHAH9"A
HHHWGHBH9I4E1HVFJ B BV F FHG H H HO HWEHBL9H Q A A WHWHHBHWI9SH Q A A W HWHHBHWI9H Q A A W HWHHBHWI9H Q A A W$HWHHBHWI9I4HVFJ B BV F F H H HWHO(HHBHWI90I4E1HVFJ B BV F FHG H H HO0HWEHBL9H Q A A WHWHHBHWI9HHWG HBI9eH@ HWfG HHBHWI98H@ HWfG HHBHWI9 mHWEHBL9H Q A A WHWHHBHWI9H Q A A W HWHHBHWI9uH Q A A W HWHHBHWI97H Q A A W$HWHHBHWI9H Q A A W(HWHHBHWI9H Q A A W,HWHHBHWI9}H Q A A W0HWHHBHWI9?H4HVFJ B BV F F H H HWHO8HHBHWI9AHGE1ɉG@HWEHBL9H Q A A WHWHHBHWI9pH Q A A W HWHHBHWI92H Q A A W HWHHBHWI9H Q A A W$HWHHBHWI9H Q A A W(HWHHBHWI9xH Q A A W,HWHHBHWI9:H Q A A W0HWHHBHWI9H4HVFJ B BV F F H H HWHO8HHBHWI9IDBA BA BHWHHWA ADG@ AIHBI9<IE1HHWDH@HGHGLG D(HWDHBH9I Q A A WHWHHBHWH9I Q A A W HWHHBHWH9mI Q A A W HWHHBHWH9/I Q A A W$HWHHBHWH9I Q A A W(HWHHBHWH9I Q A A W,HWHHBHWH9uI Q A A W0HWHHBHWH97I Q A A W4HWHHBHWH9AHGE1ɉG8HWDHBH9AHHWGHBH9I Q A A W HWHHBHWH9dI@ HWfG HHHWH94HOJE1HG(KHWEHBL9 H@ HWfGHHBHWI9HHWfGHBI9HHWG HBI9HHWfG HBI9HGE1ɉG fHWEHBL9OH Q A A WHWHHBHWI9H Q A A W HWHHBHWI9H Q A A W HWHHBHWI9H Q A A W$HWHHBHWI9WH Q A A W(HWHHBHWI9H Q A A W,HWHHBHWI9H Q A A W0HWHHBHWI9H Q A A W4HWHHBHWI9_HDBA BA BHWHHWA ADG8 AHBI9HE1HHW<H@HGHGD HODAHQH9H E1Q A AHG WHWEHBL9H Q A A WHWHHBHWI9GH Q A A W HWHHBHWI9 H Q A A W HWHHBHWI9H Q A A W$HWHHBHWI9H Q A A W(HWHHBHWI9OH Q A A W,HWHHBHWI9I E1Q A AHG W0
HwAHNL9I2@HO DfGEHF1I9I
Q A A FT HWA9HJHO|HBHI9sGHWDHBH93I Q A AHG
҉W$E1LHWADwDHT H: uv L8 fb HGHH9HGwHWDHBH9I Q A AHG
҉WE1LHWADwDHT H?: HGHH9HGr# 8 HGHH9HGLuHWDHBH9H@ HWfGHHBHWH9HWEHBL9H Q A A WHWHHBHWI9`HHWG HBI9DH@ HWfG HHBHWI9H@ HWfG HHBHWI9H Q A A W$HWHHBHWI9H E1Q A AHG W( D HOHAH9\HHOGHAH9@DHHGH@H9DG#HAHOG A GDMcIH9LGI
E1HG HWEHBL9H@ HWfGHHBHWI9H@ HWfGHHBHWI9dHHORHHO ffW t
f4HAI9'HWA
Hf fG HW7 HBI9IHHW H@HGHG(HWHBI9AHf HWfG0 HBI9IE1HHW4H@HGHG< HWDHBH9qI Q A A WHWHHBHWH93I Q A A W HWHHBHWH9I@ HWfG HHHWH9HOJHG(HWDHBH9I Q A A WHWHHBHWH9]WAHGI9H ]E1G VWAHGI9At,A A @ A D A D HBI9AHGG HBI9AHGE1ɉG4HBI9AHGE1ɉGDHBI9cHGE1ɉG<{ </audit>
<?xml version='1.0' ?>
<audit>
" %u Message IPC Semaphore IPC Shared Memory IPC Error %u + %u msec %s=" 0x %02x <record </record> <argument <attribute <exit <exec_args> <exec_env> <file <group> <ip_address> <ip <IPC <IPC_perm <ip_port> <opaque> <path> <process <return <sequence <socket <socket-inet <socket-unix <socket-inet6 <subject <text> <arbitrary <zone unknown trailer /> </exec_args> </exec_env> </file> </group> </ip_address> </ip_port> </opaque> </path> </text> </arbitrary> sequence seq-num opaque ip port %#x IPC ipc-type ipc-id exit errval retval zone name text path argument arg-num value 0x%llx desc 0x%x header version event modifier time msec file invalid socket sock_dom sock_type lport laddr faddr fport ip addr ex header_ex host socket-unix type port addr exec env <env> </env> exec arg <arg> </arg> arbitrary hex %x string %c binary %c octal %o decimal %d print %zu count byte short int int64 %d subject_ex audit-uid uid gid ruid rgid pid sid tid %llu process_ex IPC perm creator-uid creator-gid mode %o seq key group <gid> </gid> attribute fsid nodeid %lld device subject %u socket-inet process ip service_type len id offset time_to_live protocol cksum src_addr dest_addr ip addr success failure : %s failure: Unknown error: %d return socket-inet6 zR x ! AC
< E AC
E \ ! AC
| AC
AC
/ AC
/ AC
AC
AC
$ < AC
T d AC
AC
AC
AC
d AC
E AC
$ p AC
P$ D AC
T l 6 AC
$ AC
T $ AC
T $ AC
T $ AC
X $ , AC
T $ T u AC
T $ | AC
T $ AC
T $ AC
T $ A AC
T $ A AC
T $ D * AC
W l z AC
L $ AC
X | AC
L $ 9 AC
X $ AC
X $ AC
G $ D AC
G $ l AC
T $ + AC
X $ + AC
X $ & AC
T $ AC
M $ 4 AC
M $ \ AC
M [ AC
L [ AC
L $ AC
M $ AC
M $ AC
M $ < AC
M $ d A AC
X $ AC
M $ AC
X $ AC
X ) AC
E $ $ AC
M $ L AC
M $ t AC
G $ L AC
T $ AC
M $ AC
M $ AC
G $ < AC
T d AC
L $ AC
X $ AC
X ( AC
AC
P
p AC
4
AC
T
AC
t
3 AC
AC
AC
1 AC
AC
$ AC
X $ < P AC
X d e AC
AC
E AC
AC
GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rela.text .data .bss .rodata.str1.1 .rela.rodata .rela.eh_frame .comment .note.GNU-stack @ ?
& ( , ( 1 2 ( E H @ 5
R @ M 8
\ - e M M u W W
! # 0 0 P / = / J V ` j p x d ` p 6 P
' 6
u C
V @ e t A A @ * p z | ` 9 ` p * + @ P + V ! & j " | # $ * [ * [ P+ - 0 03 5 A 8 1 9 B ; S = ) d P= x ? pB D L pE H J M PN O P , Y p B `Z X \ l _ 3 | P_ p` a 1 Pa `c pf e h k E
! , 4 ; 0 E O W ] c u Q ( 0T d P # ) / 6 = B J m bsm_io.c close_attr print_ipctype print_errval print_msec64 print_msec32 print_evmod open_attr print_mem print_8_bytes print_4_bytes print_2_bytes print_1_byte print_tok_type print_delim print_invalid_tok print_trailer_tok close_tag print_seq_tok print_opaque_tok print_iport_tok print_ipc_tok print_exit_tok print_string print_zonename_tok print_text_tok print_path_tok print_arg64_tok print_arg32_tok print_event print_sec64 print_header64_tok print_sec32 print_file_tok print_header32_tok print_ip_ex_address print_socketex32_tok print_inaddr_ex_tok print_header64_ex_tok print_header32_ex_tok print_sock_unix_tok print_execenv_tok print_execarg_tok print_arb_tok print_user print_group print_subject64ex_tok print_subject32ex_tok print_process64ex_tok print_process32ex_tok print_ipcperm_tok print_newgroups_tok print_attr64_tok print_attr32_tok print_ip_address print_subject64_tok print_subject32_tok print_socket_tok print_sock_inet32_tok print_process64_tok print_process32_tok print_ip_tok print_inaddr_tok print_retval print_return64_tok print_return32_tok fetch_sock_inet32_tok fetch_process32ex_tok fetch_process32_tok fetch_iport_tok fetch_ip_tok fetch_inaddr_ex_tok fetch_inaddr_tok fetch_header32_ex_tok fetch_sock_unix_tok fetch_header64_ex_tok fetch_process64ex_tok fetch_process64_tok au_print_xml_footer .mcount fwrite au_print_xml_header fprintf fputs fputc __stack_chk_guard getauevnum_r __stack_chk_fail ctime_r __inet_ntop bcopy strlen getpwuid getgrgid __inet_ntoa au_bsm_to_errno strerror au_print_tok_xml au_print_tok memchr memcpy au_read_rec fgetc fread malloc memset free __error au_fetch_tok X
: X O
T Y l
" X
+ X
.
K
1 '
= 5 X ?
] U X f
. v
f X
.
f X
. X
q X >
v E Y [
y c [ u X X X X X '
. G Y
T ^ Y v
c
~
/ $
A
^
m {
F
t
)
8 F
c
$
.
K
e X X
X
f
. X
5
M
e
}
X
. h
. X
. i
X
$
$ - X H
( \
,
5
.
. ) X @
< T
A u
H
.
.
X N
]
X
O
T Y X p
Y X
^ X
c
l
.
t
z 5
.
z X
c 8
l G
. _
t m
.
\ X p ^ _
\ ^ ; \ D
. N [ W
. _ [ f ` X ^
. [ ^ a \ `
X ,
D
S
. k
0
. M
. X ^
. [ ^ B a Q \ X ` } X
] X
.
D
i
.
. X ^
Y ^ b \ 0 c F b Q \ [ ` l X
$
$
$
=
c
u
$
$
$
$ -
$ X
= X \
t
.
2
.
. m X
.
>
b
.
. ! X !
!
!
. !
"
" " d e"
. " d " X "
' #
0
# Y # d >#
6 C# Y n# d # X #
= $
F $ Y .$ d N$
L S$ Y ~$ d $ X $
S % %%
A%
. t% [ %
e % l %
% \ %
&
& [ #&
4&
. Q& ] s& [ &
o & v & d &
'
' [ '
('
. E' ] {' [ '
' '
] ' a '
z ' '
'
' [ (
(
. 7( ] j( [ (
(
( [ (
(
. ( ] ) [ $)
@)
. ) [ )
)
. ) [ *
.*
. p* [ * X * e *
+ X + f @+
b+ X }+
+
+
+
,
%,
I,
W,
. o,
},
. ,
,
t-
. -
. -
. X .
5.
Y.
}.
.
.
.
.
. /
/
. 5/
F/
. 0
. 00
. L0
. 0 X 0
0
0
1
A1
e1
1
1
. 1
1
. 1
1
2
. 2
. 2
B3 X ]3
u3
3
3
3
4
)4
74
. O4
]4
. u4
4
. T5
. p5
. 5
. 5 X 6
6
D6
h6
6
6
6
! 6
$ 6
. 6
(
7
. 7
! 7
. 7
. 28 X O8
, ~8
2 8 Y 8
8 8 Y 9 X 89
? P9
^9
! v9
9
9
I 9
. 9
N 9
U
:
Z :
`:
! :
. :
U :
-; X H;
? `;
n;
! ;
;
;
I ;
. ;
N <
U <
Z +<
. p<
! <
. <
U =
. *= X 4= g b= X }=
a =
=
=
>
%>
I>
W>
. o>
}>
. >
>
r?
. ?
. ?
? X
@
a %@
I@
m@
@
@
@
@
. @
A
. %A
3A
i B
. B
. =B
. |B X B
B
B
. B
B
. C
!C
0C
. OC
C
. C
. C
. 9D X PD
m hD
wD
. D
D
. D
" E
. 1E
. E X E
y E
E
E
!F
EF
iF
wF
. F
F
. F
F
G
. G
. G
H X -H
y EH
iH
H
H
H
H
I
. I
-I
. EI
SI
. "J
. >J
. ]J
. J X J
J
J
K
&K
. EK
TK
. sK
K
. K
K
K
K
. L
<L
L
. L
. M
. ]M
. M X M
aN X sN
. xN [ N h N
N Y N i N
N [ N
N [ O X 8O
LO
A qO
H O
U O
U P X 8P
LP
A qP
H P
. P
. Q X ,Q H ET X T
T
T
. T
. Y X eZ X \ X _ X U_ X u` X a X Ua X }c X c l
d m =d X Hd o qd p d q d r d p e s
e t 1e t le p e p e p e q e c f c f c -f p Wf s \f t uf X h X k X m X kn h Y q Y Y [ Y Y , Y D [ k [ { [ [ [ [ [ [ [ [ [ , [ = \ { Y Y Y Y Y Y ) Y F Y c Y Y Y Y Y Y Y . Y K Y h Y Y Y Y Y Y Y 3 Y P Y t \ Y ] Y Y
Y " Y : Y R Y j Y Y Y Y * \ * [ ++ \ G+ [ E= \ g ( 0 8 @ H P X ` h p x b J 2 O ( 0 8 @ H P X ` 7 h - p x l ( 0 8 @ H P X ` h p x - b ( 0 8 @ H b P X b ` h p x K V ( 0 8 @ H n P X ` h p x & > ( 0 8 @ H P X ` h p x ( 0 8 @ H P X ` h p x & ( ' 0 ' 8 ' @ % H T P Q X T ` S h S p Q x Q Q Q Q Q Q Q Q Q Q S S S S Q }S jS WS DS 1S S S ( R 0 R 8 R @ Q H Q P R X Q ` Q h Q p Q x Q Q Q Q R R R sR Q Q Q Q Q Q Q Q Q Q Q Q Q Q ( Q 0 Q 8 Q @ Q H Q P `R X Q ` Q h Q p Q x Q Q Q Q Q Q Q Q Q MR Q Q Q Q Q Q Q
Q
Q
Q
Q
Q (
Q 0
Q 8
Q @
Q H
:R P
'R X
R `
R h
Q p
Q x
Q
Q
Q
Q
Q
Q
|Q
iQ
VQ
CQ
Q
0Q
Y
^T
Y
Y
fY ^T ^T ^T ^T ^T ( ^T 0 ^T 8 ^T @ ^T H ^T P ^T X GY ` (Y h Y p X x ^T X X X nX OX 0X X W W W ^T ^T W ^T ^T ^T ^T ^T ^T ^T ^T ( vW 0 WW 8 8W @ W H ^T P ^T X ^T ` ^T h ^T p ^T x ^T ^T ^T ^T ^T ^T ^T ^T ^T ^T ^T ^T ^T V ^T ^T ^T
^T
^T
^T
^T
^T (
^T 0
^T 8
^T @
^T H
^T P
V X
^T `
^T h
^T p
^T x
^T
^T
^T
^T
^T
^T
^T
^T
^T
^T
^T
^T
V
V
~V
_V
@V ^T !V ^T V U ( U 0 U 8 U @ gU H HU P )U X T ` T h p !n x = !n !n !n !n !n !n !n !n !n !n !n ƅ @p on 8z !n P| @p on ( on 0 vq 8 V| @ \| H b| P } X P ` !n h !n p x !n !n !n !n !n !n !n !n V n !n !n !n !n !n !n !n !n !n !n ( !n 0 !n 8 !n @ !n H !n P !n X !n ` !n h !n p x !n !n !n !n !n !n !n !n !n !n !n !n !n on !n !n !n !n !n !n !n !n ( !n 0 !n 8 !n @ !n H !n P !n X !n ` !n h p p r x r bt 0u !n } !n } } } sw z &z c ,z |q 2z
@
0 `
0
P
@
h
p
` (
H
p
P
0
X
@
H
@ p
p
`
(
H
` p
p
P
!
" 8
# `
$
*
*
P+
-
0 @
03 h
5
8
9
;
= (
P= P
? x
pB
D
pE
H
J @
M h
PN
O
P
Q
0T
Y 8
`Z X
\ x
_
P_
p`
a
Pa
`c @
d h
pf
h
k
m bsm_fcntl.po/ 1354609168 0 0 100644 2024 `
ELF > H @ @
UH 1 D ;< tHHuɸ HHHH t f UH 1҉ f; tHHuɸHH Ht@u 1
k l m r Y zR x G AC
< M AC
GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rela.text .data .bss .rodata .rela.eh_frame .comment .note.GNU-stack @ & , 1 > ` X 9 0 H - Q a 8
N
G 2 : P M bsm_fcntl.c bsm_fcntl_cmdtab au_fcntl_cmd_to_bsm .mcount au_bsm_to_fcntl_cmd 8 A U d
@
P bsm_event.po/ 1354609168 0 0 100644 9016 `
ELF > P @ @ UH H= Ht 11 UH ɿ f D UHH]LeLmLuL}H` L% H]IHL H1LHE H1LI H1LI H} HtMtL H v E1LH]LeLmLuL}I~ L MuHI~2 H} HfAtHuH u EAFAF L H1frI~2 L UHATS H A OH= ta D H Ht\
Ht H aHtfD;#u H[A\þ HH u1 D UH 1HH HH H H H f f H H UHSH H H= taH Hta
Ht = #tH Ht/ HH[þ HH u1 D f D UH 1HH H H H H f f H H UHATS IH M H= tfH Htj
Ht H HtHsL u H[A\þ HH {1 UHSH 1H H H H H f f H H H H HH t fHH[1HH[UH H f UH H 1HH HH H H H f f H H UH H= Ht H ɿ r /etc/security/audit_event : zR x " AC
< # AC
$ \ ) AC
X AC
C AC
AC
E AC
AC
C $ AC
E D AC
d AC
: AC
GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rela.text .data .bss .rodata.str1.1 .rela.rodata .rela.eh_frame .comment .note.GNU-stack @ 8
& , @ 1 2 E @ "
R M "
\ - e u
" ( " ( ` ) 5 @ @ H 2 \ c w 2 @ 2 ` 2 @
% 0 # 0 C X a h p u @ P : bsm_event.c setauevent_locked fp mutex eventfromstr eventdelim linestr event_ent_desc.4841 e.4842 event_ent_name.4840 event_ent_desc.4781 e.4782 event_ent_name.4780 event_ent_desc.4851 event_ent_name.4850 e.4852 ep.4853 event.4861 event_ent_desc.4811 e.4812 event_ent_name.4810 .mcount fseek setauevent pthread_mutex_lock pthread_mutex_unlock strtok_r strlen strlcpy atoi getauditflagsbin getauevnum_r fgets strrchr fopen getauevnum getauevent_r getauevent getauevnam_r strcmp getauevnonam_r getauevnonam getauevnam endauevent fclose $ 5 :
? ! J
} # # # # $ % $
) % 2 & G ' f $ %
! # $
@ )
@ *
@
"
"
' + 1 $ E J
^ l w
! # $
@ ) &
@ + * 9 ; D
@ S
X " g
l
q + { $
( 0 6
( 3
8 ! M # W $ a
@ f ) u
@ z *
@ 0
"
+ $
@ x
) 4 = j F Q 0 \ ` g ( k @ p / z
` 8 P
@ ( 1 : @ > E L U Z
_ ! f $ p 5 w
O " ( - 1 K / "
@
0 `
`
@
(
H
h
P bsm_control.po/ 1354609168 0 0 100644 14552 `
ELF > @ @ UH HuɸÃ <-w$ H H71H1H7H
f D f D UH IIЅx;5 |B taHt*h D ~Zs D y tSɸ dH% H HHthHcf|@ yɉLL duIiQ H1I@MIIHHiQ Ii HH1L1Ii H1H HHDf. UH H= Ht H ɿ UHHĀ H= HtF u>Hu xHEH; t)H H= H H= 11 f D UH Xɿ f D UHAVAUATSH H= IIH H Lmf D H H = #t1 HH= r!
t
t u HH= sLH HtHL w1LH HIti1H[A\A]A^Ë u H @tҸH= HH UHAVAUATSH@ H IH IHH HE1 H ? HH6 < < } HLHHL H$M1 tI HUH3 H@ [A\A]A^HH`HHLWuHHL:u L Ht\AE (ƅBHHLB 1@ , L HAE 붿 @ UHSH( H Hu r H}H < < z HMHU1 t&t% H([EBUHuHuHHH= v= H(1[ÐHH}f 땿 v b @ UHH]LeLmH0 I I Hu 4xbH]Ht7H L9s;LHL 1H]LeLmf ߿ ο f D UHH]LeLmH0 I I Hu tx`H]HtFH L9s(LHL 1H]LeLmÿ п UHH]LeLmH0 I A Hu xcH]Ht8McH L9s9LHL 1H]LeLmÿ п f D f D UHH]LeLmH0 I A BHu xcH]Ht8McH L9s9LHL 1H]LeLmÿ п f D f D UHH]LeLmH0 I A Hu 9xcH]HtIMcH L9s(LHL 1H]LeLmÿ п 뿐UHSH H Hu xDH}Ht% D 1H[f D H [ÿ f UHAWAVAUATSH I IƸMt^LuH}о HItfH5 E11L t;H AHHuL H[A\A]A^A_IcHH A L 1 UHAVAUATS HIIth Lc 1L t2uL L I9v9H LL I9v"1H HHu[A\LA]A^ [A\A]A^H @ r /etc/security/audit_control expire-after %lu%c%[ adnorADNOR]%lu%c and or filesz %ju%c host policy naflags flags dir minfree , : cnt ahlt argv arge seq windata user group trail path scnt public zonename perzone zR x D AC
< AC
\ A AC
| AC
# AC
$ Y AC
K $ AC
N , AC
E , AC
P L AC
P l AC
P AC
P AC
P AC
E $ AC
M $ AC
G GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rela.text .data .bss .rela.rodata .rodata.str1.1 .rela.eh_frame .comment .note.GNU-stack @
& , 6 p 1 1
> 2 P R ( 8 M X7
\ ` - e u D D P - 3 6 ? L [ ` Y q p w
P A
" / 5 < B 0 # H N U ^ e l r z , p 0
0 $ + 0 < bsm_control.c au_spacetobytes setexpirecond mutex fp ptrmoved setac_locked lastctime.5405 getstrfromtype_locked delim linestr au_polstr .mcount __mb_sb_limit _GLOBAL_OFFSET_TABLE_ _ThreadRuneLocale _CurrentRuneLocale _DefaultRuneLocale endac pthread_mutex_lock fclose pthread_mutex_unlock __isthreaded fstat fileno fseek setac fgets strchr strtok_r strcmp ferror fopen __error getacexpire __stack_chk_guard sscanf strcasestr __stack_chk_fail getacfilesz getachost strlen strlcpy getacpol getacna getacflg getacdir getacmin atoi au_strtopol strdup strsep free au_poltostr strlcat $ U h 4 9
U Z
_ f l w ~
! " 5 :
? J
p w l
$
%
& ' 2 & O Z v { (
) *
,
w
+ -
,
E # . _
d p
u /
I .
L !
S & - 5 * :
E }
*
*
#
Y = 2 P 3 U
Z q
v
^ 2 3
/
4 @
E Q
V
e 2 3
E M
U c
m 2 3
s ;
2 N
3 S
X
m
r
~
w
9
B P ; j
o < ~ ' = * = )
1 ? = H ? V O o 2 , ( 0 8 @ H P X ` h p x , ( 0 8 ( @ H P X > ` h 3 p
(
8
H
X
@
P `
P
0
`
0
P
p
p
0
0
bsm_flags.po/ 1354609168 0 0 100644 3512 `
ELF > @ @ UHAWAVAUATSH HpLeIIA1HߺH HDžP H HE1HDžX HDž` HE LPLPH`L L Ht{XtA#E9 AE !9 u +HtEtaH`H H H` H ,LHX HuL9tC 1HUH3 uKHĈ [A\A]A^A_HP H HP H띨i-H] D D f D UHAWAVAUATSH HpII1H HDžP HHDžX HDž` H HE1HE LhLe H5 A LAF LLPH` H LP?t XA!tXA!F D H5 1L HtvE1^tQ+tA- tQHL HtmEut XA tXA FH HA H 1HUH3 u$HĈ [A\A]A^A_ , zR x $ AC
P $ D AC
P GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rela.text .data .bss .rodata.str1.1 .rela.rodata .rela.eh_frame .comment .note.GNU-stack @ 4 H (
& t , t 1 2 t E x @ p
R h M
0
\ - e u P @
) 1 C J U e m t bsm_flags.c flagdelim getauditflagschar .mcount __stack_chk_guard memset setauclass getauclassent_r strlcpy strlen __stack_chk_fail getauditflagsbin strtok_r getauclassnam_r __error E
n *
R ^
1 s }
0
H
bsm_class.po/ 1354609168 0 0 100644 6976 `
ELF > @ @ UH H= Ht H ɿ f D UH H= Ht 11 UH ɿ f D UHAWAVAUATSH H= I H Htp= #tܾ
Ht L% H]п HL H1LI H1LI MHt
MtH u6E1HL[A\A]A^A_þ HH AL HwI> L H HGwI~H H 11L AF{f D UHAUATSH I A 9LHHtD9cuHH[A\A]ÿ f UHSH 1H H H H H H H H [ D f D UH H 1 H H H H H H p H H f D UHSH H H- H HH[f D UHAUATSH 1HIIt: fLHHtH3L u HH[A\A]f UHSH 1HH H H H H H H HH [ r /etc/security/audit_class : zR x : AC
< " AC
\ # AC
$ | : AC
M W AC
I u AC
E AC
: AC
E $ g AC
I D w AC
E GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rela.text .data .bss .rodata.str1.1 .rela.rodata .rela.eh_frame .comment .note.GNU-stack @ w 0
& , 1 2 E @ 8
R ` M P
\ H - e u u u
0
@ " ( : ? G R @ H f m @ H H
:
) / p # : @ H Q W ^ f n W ~ @ u P : g w bsm_class.c mutex fp setauclass_locked getauclassent_r_locked linestr classdelim class_ent_desc.4815 c.4816 class_ent_name.4814 class_ent_desc.4768 c.4769 class_ent_name.4767 cp.4770 class_ent_desc.4796 c.4797 class_ent_name.4795 endauclass .mcount pthread_mutex_lock fclose pthread_mutex_unlock fseek setauclass fgets strrchr strtok_r fopen strlen strlcpy strtoul getauclassnum_r getauclassnum memset getauclassent getauclassent_r getauclassnam_r strcmp getauclassnam
' 1
E L u z
!
"
# ) # 9 # h
m
r $ | % & % & '
,
1 J X
@ _ j u * @
@ ( *
( @ " '
1
8 = D Z b
g t
|
.
+ 6 A J * Q U \ ` l
6 [ ( s -
@
@ `
p
@
P (
H
bsm_wrappers.po/1354609170 0 0 100644 16672 `
ELF > @ @ UH ɉH UH ɉH UH H @ UH H8uH8 ɸf D f D UH H8uH8 ɸf D f D UH H0uH0 ɸf D f D UH H8uH8 ɸf D f D UH H uH ɸf D f D UH H uH ɸf D f D UH HuH ɸf D f D UH HuH ɸf D f D UH HuH ɸf D f D UH HuH ɸf D f D UH HuH ɸf D f D UH HuH ɸf D f D UH H0uH0 ɸf D f D UH H0uH0 ɸf D f D UHH]LeH0 HH H $ Au
DH]Le 8uHcHuк HEHcCHEHcCHEC ECE AHEЉHE؉CHECEC ECA xf D UHH]LeH0 HH H # Au
DH]Le 8uHcHuк HEHcCHEHcCHEC ECE AHEЉHE؉CHECEC ECA xf D UHH]LeH HI" uLeH] @ 8uIc$Hu HE HEA$ UHH]LeH HI! uLeH] @ 8uIc$Hu HE HEA$ UHH]LeH HI& uLeH] @ 8uIc$Hu HE HEA$ UHH]LeH HI% uLeH] @ 8uIc$Hu HE HEA$ UHH]LeLmLuL}H0 HIDEAA A HtHމ 4 MtLD uA HHtvHD t3A D 1҅ H]LeLmLuL}H A1D 1 A1D 1 H L 1 ZL A1D 1 $H L A1D 1 1 @ UHH]LeLmLuH IAA HHt8L Ht[AEHLd$H $Ll$Lt$H 1 H $Ld$Ll$Lt$H 1 UHH]LeLmLuH0 HE0AʋMIADDADHD$E($DM DE HHt5L HtUAEHLeH]LmLuH 1 H]LeLmLuH 1 UHH0 HEDL$EAȹD$D$HD$ $ f UHH]LeH I Ht LH $Ld$E11H 1 H $Ld$f UHATSH HE(AIDDɉDHD$E $DMDE HtHL[A\E11H 1 H[A\f D UHH HHt=E E HM H}E1E1H¾ HE 1҅uɉ D 8 H¿ 1 f UHH]LeH HHt"Lp1L uE1H]Le 8 u8L t 8 H¿ 1 8 H¿ 1 f D UHSH HHt t H[ D HH{[ UHH]LeLmLuL}H ȉH LHH)HE)x)p)h)`)X)P)H)@fH H H1Lx Aj H0 U Aŋ A A H EEDHD$D,$ H Y HD v Hx txHUHHH Dž( HHxHDž0 H H H HD H HD D 1HH3 R H]LeLmLuL} 8Ntf D 8 H¿# 1 A A A HAEDH D $HD$ E # 1 8N H Dž 2 # 1D ` 8 H¿# 1 1D 8 HL 8 H, 8 H audit_write() %s: au_open() failed %s: write of subject failed %s: au_to_return32() failed %s: au_close() failed audit_write_failure_self() %s: au_to_me() failed %s: au_to_text() failed audit_write_failure() %s: au_to_subject32() failed audit_write_success_self() audit_write_success() sysctl() failed (%s) fstat() failed (%s) /dev/console stat() failed (%s) audit: auditon failed: %s audit: au_open failed: %s audit: getaudit failed: %s audit: au_write failed: %s audit: record not committed %s: write of caller token failed %s: write of return code failed audit: unable to build subject token audit: failed to generate text token audit: enable to build return token audit: getaudit_addr failed: %s zR x AC
< AC
\ AC
| 4 AC
4 AC
4 AC
4 AC
4 AC
4 AC
< 4 AC
\ 4 AC
| 4 AC
4 AC
4 AC
4 AC
4 AC
4 AC
< AC
L \ AC
L | q AC
L q AC
L q AC
L q AC
L $ AC
X $ $ AC
T $ L AC
T t G AC
g AC
L AC
G AC
AC
O ? AC
E $ 4 AC
[ GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rela.text .data .bss .rodata.str1.1 .rodata.str1.8 .rela.eh_frame .comment .note.GNU-stack @ 0( & , 1 2 @ 2 T X O > ^ - g w
$ x
& . < @ O ` 4 ^ f 4 u 4 4 ` 4 4 4 4 ` 4 4 4 4 ` 4 0 4 A Q a q r q q q p
0
, < G S ` g l `
?
# + 3 = M ^ g bsm_wrappers.c audit_get_car .mcount auditon audit_get_cwd audit_send_trigger audit_set_stat __error audit_get_stat audit_get_sinfo_addr audit_get_pinfo_addr audit_get_pinfo audit_set_pmask audit_set_fsize audit_get_fsize audit_set_kmask audit_get_kmask audit_set_class audit_get_class audit_set_kaudit audit_get_kaudit audit_set_qctrl audit_get_qctrl audit_set_policy audit_get_policy audit_set_cond audit_get_cond audit_write au_open au_write au_to_return32 au_close au_free_token syslog audit_write_failure_self au_to_me au_to_text audit_write_failure au_to_subject32 audit_write_failure_na audit_write_success_self audit_write_success audit_set_terminal_host sysctl strerror audit_set_terminal_port fstat stat audit_set_terminal_id audit_submit __stack_chk_guard getaudit_addr getpid getgid getuid getegid geteuid vsnprintf au_errno_to_bsm au_to_subject_ex getaudit __stack_chk_fail % E e % C e % C e % C e ) d 4 d & A a & A a % & & ' & $ ( N ) \ ( a
f
( r * (
? * ) )
* ) (
* ) ) ( ( -
2
# > * M
R
[ ^ * , -
q
*
)
q
%
* I
}
/
-
*
)
* Q . q { ,
* / 2
7
A * i 4 5
*
(
7 B
O
G T
8 ]
d
5 i
T x
*
5
3
*
6 ,
` q ; # % < = > ? @ A ; / C
H T & B -
p & C ' & ( ( @ ; a q x 5
g * = > ? @ A D
* $ 9 E F
* ( 5
*
( ' . 5 3
@ G N 5 S
` g n 5 s
5 X ~ > ~ > ~ > ~ $
$ $ + $
3
@
`
@
`
`
@
`
`
`
@
`
(
p P
0
x
`
`
8
bsm_errno.po/ 1354609168 0 0 100644 12144 `
ELF > @ @
UH 11H t$; uHcHHH t ɸ f D UH 1@1H= t; uHHH 1 D UHS @HHu[ɸË@=t1[f D f D UH @nH txt HPH Unrecognized BSM error Success Operation not permitted No such file or directory No such process Interrupted system call Input/output error Device not configured Argument list too long Exec format error Bad file descriptor No child processes Cannot allocate memory Permission denied Bad address Block device required Device busy File exists Cross-device link Not a directory Is a directory Invalid argument Too many open files in system Too many open files Text file busy File too large No space left on device Illegal seek Read-only file system Too many links Broken pipe Result too large No message of desired type Identifier removed Channel number out of range Level 2 not synchronized Level 3 halted Level 3 reset Link number out of range Protocol driver not attached No CSI structure available Level 2 halted Resource deadlock avoided No locks available Operation canceled Operation not supported Disc quota exceeded Invalid exchange Invalid request descriptor Exchange full No anode Invalid slot Bad font file format Process died with the lock Lock is not recoverable Device not a stream Machine is not on the network Package not installed Link has been severed Advertise error srmount error Communication error on send Protocol error Locked lock was unmapped Facility is not active Multihop attempted Bad message File name too long Given log name not unique Remote address changed Illegal byte sequence Function not implemented Restart syscall Directory not empty Too many users Destination address required Message too long Protocol not available Protocol not supported Socket type not supported Protocol family not supported Address already in use Network is down Connection reset by peer No buffer space available Socket is already connected Socket is not connected Operation timed out Connection refused Host is down No route to host Operation already in progress Operation now in progress Stale NFS file handle Too many processes RPC struct is bad RPC version wrong RPC prog. not avail Bad procedure for program Authenticateion error Need authenticator Attribute not found Programming error Just return do direct ioctl in GEOM Device power is off Device error Bad executable Bad CPU type in executable Malformed Macho file Operation failed by policy RFS specific error Structure needs cleaning Not a XENIX named type file No XENIX semaphores available Is a named type file Remote I/O error No medium found Wrong medium type Required key not available Key has expired Key has been revoked Key was rejected by service Resource temporarily unavailable Operation not supported by device Inappropriate ioctl for device Numerical argument out of domain Too many levels of remote in path Value too large to be stored in data type Given f.d. invalid for this operation Can't access a needed shared lib Accessing a corrupted shared lib .lib section in a.out corrupted Attempting to link in too many libs Attempting to exec a shared library Too many levels of symbolic links If pipe/FIFO, don't sleep in stream head Socket operation on non-socket Protocol wrong type for socket Address family not supported by protocol family Can't assign requested address Network dropped connection on reset Software caused connection abort Can't send after socket shutdown Too many references: can't splice Inappropriate file type or format ioctl not handled by this layer Shared library version mismatch
#
! ! " " # S $ R % & ' ( ) * + , - . M / U 0 - 1 E 2 3 4 5 6 7 8 9 : ; < @ A B G C [ D E F G \ H I J Z M Y N ? O T P Q R S T U V W X V Y N Z > [ \ ] B ^ D _ & ` ' a ( b ) c * x + y , z - { . | / } 0 ~ 1 2 4 5 6 7 8 9 : ; < = @ A % $ F C H I J K L O P Q W X zR x J AC
< ; AC
\ 4 AC
A | 9 AC
GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rela.text .data .bss .rodata.str1.1 .rodata.str1.8 .rela.rodata .rela.eh_frame .comment .note.GNU-stack @ & L , L 1 2 L @ 2 0 T p O ( a p \ / ` k - t 5 5
p j
p P ; - J = E 4 U 9 a bsm_errno.c bsm_errnos bsm_lookup_errno_bsm au_errno_to_bsm .mcount au_bsm_to_errno au_strerror strerror ! 4 = U s
( 7 8 Q H a X y h x ' = I ( U 8 ( H g X w h x P " 1 p ( = 8 N H i X | h x . H [ n ( 8 H X h x . 2 F d z ( 8 H X h x ( ; U @ h ( 8 l H X h x 0 P * n ( D 8 p H b X h y x 8 ( $ 8 5 H S X m h x ` % 7 ( 8 C H [ X o h | x < Q b ( r 8 H X h
@
P `
bsm_audit.po/ 1354609168 0 0 100644 6512 `
ELF > 0 @ @
UH HtRHcH HtB: t=HNHJ HAH= w;HBHF HJ HFHBH0HFHB1f ɸ ɸf D f D UHSH HHtH?Ht HH[ H[ UHH]LeH IHWHI;$Hv H $Ld$H7H HCHI$ 1f UHAVAUATSH@ LuHAE E 0 L 8N Lk IA1D IM D HH6 HCHID$ HSID$HBHCLcHA Lk ID$HCLcHAHCHHAHCH[Ht H3HSL LcH[Hu1H@[A\A]A^ 85H@[A\A]A^ID$HCjH}1 xыE uuIFuHuPu @ t& HC HHL,HMLEAM1D I L $}HHH @ UHATS H_IHu1Cf D HCHBHCH;H H I\$HtHSHuHCID$A$ ID$ H HID$(tH IT$(HP0L% ID$0 [A\ f D f D UHH]LeLmLuH HcIIH HtM; tHHS H-H wH;vbH= 1A H @ A DH $Ld$Ll$Lt$ HAxHsHS LE1 HC I$ UHATS HcH Ht; u A [DA\f D E1t9HC H-H= w9HAxHs H{ A @ H[DA\H
A H f. UHSH = H Ht\HS(HtHC0HB0HC0 H H{ 1 HCSHC HC HCH[ÿ 8 Htٿ H HHCte t=HcS H B Z H 넿 H{ H A au_close_buffer failed %zd au_close failed zR x AC
< 8 AC
E \ g AC
L $ | AC
K AC
C $ AC
T AC
C D AC
E GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rela.text .data .bss .rodata.str1.1 .rela.eh_frame .comment .note.GNU-stack @ ` P & 4 , @ 1 2 @ + E p ( @ O - X h p ^
@ ) 0 5 ; H X a i q 8 g * 2 ; A H D P W bsm_audit.c open_desc_table au_assemble au_teardown mutex audit_free_q audit_rec_count au_write .mcount __error au_free_token free au_close_token memcpy audit_get_kaudit au_to_header au_to_trailer gettimeofday au_to_header32_ex_tm pthread_mutex_lock pthread_mutex_unlock au_close_buffer __stderrp fprintf au_close audit fwrite au_open memset malloc a s / P u , M 8 c k
A F
S X q U ! s
"
$ ?
D N % e % s
x ~
@
`
@
0
bsm_token.po/ 1354609170 0 0 100644 25872 `
ELF > x: @ @ UHH]LeLmLuL}H@ A IMAfUHMLE HHuHLeH]LmLuL}ÿ H@ HHH H H@ HPf@ DHw
HOGDDjBDBDG fDHS㥛 GEfGEƈG LI?HDG
DDvFHDD)FGЈQAAH1 D f D UHH]LeLmH A A HHuHLeH]LmH@ HHHt8 f@ HP 'DhDADDbBDBH1 f D UH @ f D UHAWAVAUATSH A I HIuHL[A\A]A^A_AL4 MuL HHIE t`1LH D;D{fCADž~1HpAЈTDDDHH9ujLE1 Y D f D UH H f UHH]LeLmH0 AH}A1 1҃tHMLEAD HH]LeHLmfUH D f D UHH]LeLmLuL}HP AAAHMMMfufUHMȃLEt!E1tLH]LeLmLuL}ÿ HItA|$HHx HHI AT$1HH DHSHK
CDDrBDBEAT$C fCEƈCEfCEĈC C
ЈQAHSAA|$thAD$HsCMLHS㥛 HI?ȈNHD)FHNFFЈQAAID$Hs HCID$ HBLE1 @ UHH]LeLmLuH` AH}A1A tLH]0 H u-HMLEAAID H]LeLmLu 8Nt1HMLEAAD UH D f D UHAWAVAUATSH AHUAADEDMЋB HI H@5 5 HHIE 1HH G M` HVzF؈ZBBDHVFDDbBDBDHV F DDrBDBDHV
F
DDzBDBEHVFEBEBMԈJEHVFEBEBEЈBEHVFEBEBMJHEHN F ЈQAAHEHN!PF!ЈQAHV%AHMyt&HUBF%HL[A\A]A^A_ 1{HAHF%HAHB E1 뻿 HItH@) ) HHIE t 1HH LE1 ef. UH UHH]LeLmLuL}H0 AAADEDM HIuLH]LeLmLuL}ÐH@% % HHI$[ H H@ HPH@ H@ HN @ @$ $F؈ZBBDHVFDDjBDBDHV F DDrBDBDHV
F
DDzBDBEHVFEBEBEԈBEHVFEBEBEЈBEHVFEBEBEBHEF ЈQAAHUBF!iLE1 Y UH UHH]LeH I HHuHLd$H $H@ HHHt/H @ AD$B BAD$fBAD$BH1 UH UHAWAVAUATSH AHUAADEDMЋB HI H@5 5 HHI$ 1HH G MX HV{HN F؈ZBBDHVFDDjBDBDHV F DDrBDBDHV
F
DDzBDBEHVFEBEBEԈBEHVFEBEBEЈBEHVFEBEBEBHEF ЈQAAHEHN!PF!ЈQAAHUBF%zt/HL[A\A]A^A_1 @ E1 fыB F)BF-BF1뽿 HItH@) ) HHI$t 1HH @ LE1 cUH UHH]LeLmLuL}H0 AAADEDM HIuLH]LeLmLuL}ÐH@% % HHI$[ H H@ HPH@ H@ HN @ @$ &F؈ZBBDHVFDDjBDBDHV F DDrBDBDHV
F
DDzBDBEHVFEBEBEԈBEHVFEBEBEЈBEHVFEBEBEBHEF ЈQAAHUBF!iLE1 Y UH UHH]LeH I HHuHLd$H $H@ HHHt<H H@ HP@ @ +I$HAID$HBAD$BH1 UHH]LeH I HHuHLd$H $H@ HHHt @ *A$BH1 f UHH]LeLmLuL}H@ @HM@}AA @t;@ E1 LH]LeLmLuL} Iǿ HHU HItLuILpL HHIE tbL1H EHUH{Hu!DcD{C l 놐 {f D @ gf1LE1 / D f D UHH]LeLmLuH I HIu LH $Ld$Ll$Lt$f D MnL HLID$ Hx HHI$tEL HP1H C LAFCH HPLH kLE1 [f UHH]LeLmLuL}H@ }HuHA Dx HIuLH]LeLmLuL}AIHEIMl$L HHI$t^L1H EHS-H{CDCDDrBDBHUDHufD{C aLE1 Q UH @ f D UHH]LeLmLuL}H H}0 udD} A A A }HEEEDH D<$HD$ H]LeLmLuL} 8Nt1H} @ uDe A A A }HEEEDH D$$HD$ x @ UHH]LeLmLuL}H@ }HUHI Dp HIuLH]LeLmLuL}AIHEI MeL HHIE L1H EHUHKqH{ LH CCЈQAAUHKCЈQAAHUDfDs C
9LE1 )UHH]LeLmLuL}H0 I Dp HIuLH]LeLmLuL}AIHEIMl$L HHI$t0L1H HUDH{fL`CDs LE1 UHH]LeH I HHuHLd$H $H@ HHHtPH H@ @ @ @ AD$AT$AЈQfAID$HAID$HA
H1 vf D f D UHH]LeLmLuL}Hp fIHMAfu f HI H@+ + HHII$# 1HHf G HCHSHKHEHCHUHMHSHKHEHCH HUHMHEAA HMfHUЈ} HMffAHUȈ HE HUAFHMfIFHIFHCHUBfCHBHCHBHCLH]LeLmLuL}E1 HE HE HE HE HE HE HE HM HE AFHUfAFHMAfCACdE1 Qf D HINH@ HHII$tjH H@ f@ @ HKHCHSHMHKHEHUHCHSHMHKH HEHUHM0LE1 LE1 @ UHH]LeLmLuL}H0 I Dp HIuLH]LeLmLuL}AIHEIMl$L HHI$t0L1H HUDH{fL#CDs LE1 UHH]LeLmLuL}H0 I Dp HIuLH]LeLmLuL}AIHEIMl$L HHI$t0L1H HUDH{fL(CDs LE1 UHH]LeLmLuL}H0 I A HIuLH]LeLmLuL}AIHEIMl$L HHI$t0L1H HUDH{fL)CDs LE1 f UHH]LeH A HHuHLd$H $H@ HHHtf ,DfDbBH1 UHH]LeH A HHuHLd$H $H@ HHHt@ f@ HP@ @@DADDbBDBH1 UHAWAVAUATSH IH?E1E1Ht'Lf D H{AHHIHu HHEuHEH[A\A]A^A_IL`L HHEHHt{L1H DHS=CDDzBDEB~LcE1I] AIH HPLHI H IE9uSH HE f< D f D UHAWAVAUATSH IH?E1E1Ht'Lf D H{AHHIHu HHEuHEH[A\A]A^A_IL`L HHEHHt{L1H DHS<CDDzBDEB~LcE1I] AIH HPLHI H IE9uSH HE f< D f D UHH]LeH I HHuHLd$H $H@ HHH H H@ HHH@ @ @ 2AT$FЈQAAAT$ HNFЈQAAA$HN F ЈQAAAT$HN
F
ЈQAAAT$HNF F F F ЈVAT$fFfFVAT$FЈQAAH1 UHH]LeLmH A A HHuHLeH]LmH@ HHHt8 f@ HP "DhDADDbBDBH1 f D UHH]LeH I HHuHLd$H $H@ HHHtDH H@ @ @ ~H@B @ @ @I$HBID$HB
H1 D f D UHH]LeLmH A A HHuHLeH]LmH@ HHHtYH @ HP RDADDbBDBDHQADDjBDByH1 jf UHH]LeH I HHuHLd$H $H@ HHHt2 @ HH /DFDDaADAH1 f D UHH]LeLmLuL}HP H}HuHHuHU Dx HIuLH]LeLmLuL}AIHEI MnL HII L1H MHHS㥛 HIt$A$H?I|$ AD$H)ڈNFIL$FAD$ЈQAAHUDHufE|$
AD$ "LE1 UHH]LeLmLuL}H@ A ILAfUHMLE HIuLH]LeLmLuL}H@ HHI$ H H@ HPH@ f@ HN
tDFDDjBDBDF fD~FEfFEƈF HS㥛 HH?HALH A)؉F
ЈQAHVADHNFDDqADAHFF @ @ @ DFDDBBDBLE1 UHH]LeLmH0 AH}A1 1҃tHMLEAD HH]LeHLmfUHAWAVAUATSH AHUAADEDMЋB HI H@9 9 HHIE & 1HH Mt HV|F؈ZBBDHVFDDbBDBDHV F DDrBDBDHV
F
DDzBDBEHVFEBEBMԈJEHVFEBEBEЈBEHVFEBEBMHF JHU
F HV!@ @ @ F!ȈJBHN%BHEPF%ЈQAHV)AHMyt)HUBF)HL[A\A]A^A_f D 1dHAHF)HAHB E1 븿 HItH@- - HHIE t 1HH G LE1 XUHH]LeLmLuL}H0 AAADEDM HIuLH]LeLmLuL}ÐH@) ) HHIE V 1 HHHV FuZBBDHVFDDbBDBDHV F DDrBDBDHV
F
DDzBDBEHVFEBEBEԈBEHVFEBEBEЈBEHVFEBEBEBHUHF
F HV!@ @ @ F!ȈJBBHUBF%nLE1 ^ UHH]LeLmH A I HHuHLeH]Lmÿ
H@
HHHtbLH f@ H rD`HHGЈQAADHOGDDiADApH1 aUHAWAVAUATSH AHUAADEDMЋB
HI H@9 9 HHI$ 1HH Ml HV}F؈ZBBDHVFDDjBDBDHV F DDrBDBDHV
F
DDzBDBEHVFEBEBEԈBEHVFEBEBEЈBEHVFEBEBEBHUHF
F HV!@ @ @ F!ȈJBHN%BHEPF%ЈQAAHUBF)zt2HL[A\A]A^A_1r E1 fB F-BF1BF5뺿 HItH@- - HHI$t 1HH G LE1 ]f D UHH]LeLmLuL}H0 AAADEDM HIuLH]LeLmLuL}ÐH@) ) HHIE V 1 HHHV FwZBBDHVFDDbBDBDHV F DDrBDBDHV
F
DDzBDBEHVFEBEBEԈBEHVFEBEBEЈBEHVFEBEBEBHUHF
F HV!@ @ @ F!ȈJBBHUBF%nLE1 ^ zR x $ U AC
X D AC
P d AC
$ AC
M AC
^ AC
P AC
$ AC
X $ 4 AC
T \ AC
$ | AC
M AC
$ AC
X AC
AC
L , AC
$ L AC
M t AC
$ AC
X AC
AC
L w AC
L $ 5 AC
X $ D AC
T $ l AC
X AC
$ AC
[ $ AC
X $ AC
X , AC
L $ L AC
X $ t AC
X $ AC
X $ AC
X y AC
L AC
L $ , % AC
M $ T % AC
M | y AC
L AC
P AC
L AC
P AC
L $ = AC
X $ D AC
X l ^ AC
P$ AC
M $ AC
X AC
P$ AC
M $ $ AC
X GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rela.text .data .bss .rela.eh_frame .comment .note.GNU-stack @ h2 `H
& 2 , 2 6 2 H 1 H`
@ 9 - I : : Y x= 8 D
U ' . 3 ` B O 0 _ f s 0 ^ p 0
.
@ p P c t w @ 5 ` `
$ - 9 H p [ 0 k | @ y p % % y P" # # # $ - % = 8 `& J ( ^ Y `( l + | - - 0 bsm_token.c au_to_header32_tm .mcount malloc free au_to_return32 au_to_return au_to_newgroups memset au_to_groups au_to_header32 gettimeofday au_to_header au_to_header32_ex_tm au_to_header32_ex audit_get_kaudit __error au_to_header_ex au_to_subject32_ex au_to_subject_ex au_to_subject32 au_to_subject au_to_sock_inet32 au_to_sock_inet au_to_process32_ex au_to_process_ex au_to_process32 au_to_process au_to_ip au_to_in_addr au_to_data memcpy au_to_sock_unix strlen au_to_arg32 au_to_arg au_to_me getaudit_addr getpid getgid getuid getegid geteuid getaudit au_to_arg64 au_to_zonename au_to_sock_inet128 au_to_socket_ex au_domain_to_bsm au_socket_type_to_bsm au_to_path au_to_text au_to_opaque au_to_iport au_to_trailer au_to_exec_env au_to_exec_args au_to_ipc_perm au_to_ipc au_to_in_addr_ex au_to_exit au_to_seq au_to_file au_to_header64_tm au_to_header64 au_to_subject64_ex au_to_subject64 au_to_return64 au_to_process64_ex au_to_process64 ?
r
L u
B R
E X v
8
Z c
B x
d v
N
&
j u
= Z
1 >
f
1 ]
/ & l
( (
( / ( > & N } (
? & O e , - . / 0 1 1 2 > - F . N / V 0 ] 1 (
& & (
9 Z & g
M y
7 % 8 + F
d
% ( 3
p
& (
0
I j & w
$ & 1 Q ^
[ (
R ( e & m ( (
< ( & (
!
@" e" u"
"
" # #
F#
# # #
$
n$ $ $
$
% =% U% ( c%
%
% D& & T& }& &
&
' ( (( F( F r( (
(
* *
*
+ -+ J+
~+
, - %-
P-
- - .
6.
/ 0
60
j0 0 0
0
_2 # !
{ ! o )
H
` h
0
0
8
p `
0
0
p P
x
@ H
p
`
`
0
p P
0 x
@
0
p X
P"
#
#
$
% H
`& p
(
`(
+
-
- (
0 /0 1354609170 0 0 100644 1944 `
ELF > @ @
UH 1 D ;< tHHuɸ HHHH t f UH 1҉ f; tHHuɸHH Ht@u 1 zR x G AC
< M AC
GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rela.text .data .bss .rodata .rela.eh_frame .comment .note.GNU-stack @ & , 1 ( > X 9 h 0 H ` - Q a 0 8
h X ( $ G : B P M bsm_socket_type.c bsm_socket_types au_socket_type_to_bsm .mcount au_bsm_to_socket_type 8 A U d
@
P bsm_domain.po/ 1354609168 0 0 100644 2408 `
ELF > @ @
UH 1
HHAt&;< uHHHH t ɸ f UH 1҉ HHAtf; uHH HuɸË@u 1
! " # $
zR x G AC
< M AC
GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rela.text .data .bss .rodata .rela.eh_frame .comment .note.GNU-stack @ & , 1 > X 9 8 0 H @ - Q m m a 8
H D G + 3 P M bsm_domain.c bsm_domains au_domain_to_bsm .mcount au_bsm_to_domain 1 : U n |
@
P