| Current Path : /usr/lib32/ |
FreeBSD hs32.drive.ne.jp 9.1-RELEASE FreeBSD 9.1-RELEASE #1: Wed Jan 14 12:18:08 JST 2015 root@hs32.drive.ne.jp:/sys/amd64/compile/hs32 amd64 |
| Current File : //usr/lib32/libbsm.a |
!<arch>
/ 1354612228 0 0 0 2770 `
f f f f f f f f z &Z &Z &Z &Z &Z &Z * * ( ( 1n 1n 1n 1n 1n 1n 1n 1n @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ h h h ݚ ݚgetfauditflags setauuser getauusernam_r au_user_mask getauusernam getauuserent_r getauuserent endauuser cannot_audit au_preselect au_print_xml_footer au_print_xml_header au_print_tok_xml au_print_tok au_read_rec au_fetch_tok au_fcntl_cmd_to_bsm au_bsm_to_fcntl_cmd setauevent getauevnum_r getauevnum getauevent_r getauevent getauevnam_r getauevnonam_r getauevnonam getauevnam endauevent endac setac getacexpire getacfilesz getachost getacpol getacna getacflg getacdir getacmin au_strtopol au_poltostr getauditflagschar getauditflagsbin endauclass setauclass getauclassnum_r getauclassnum getauclassent getauclassent_r getauclassnam_r getauclassnam audit_get_car audit_get_cwd audit_send_trigger audit_set_stat audit_get_stat audit_get_sinfo_addr audit_get_pinfo_addr audit_get_pinfo audit_set_pmask audit_set_fsize audit_get_fsize audit_set_kmask audit_get_kmask audit_set_class audit_get_class audit_set_kaudit audit_get_kaudit audit_set_qctrl audit_get_qctrl audit_set_policy audit_get_policy audit_set_cond audit_get_cond audit_write audit_write_failure_self audit_write_failure audit_write_failure_na audit_write_success_self audit_write_success audit_set_terminal_host audit_set_terminal_port audit_set_terminal_id audit_submit au_errno_to_bsm au_bsm_to_errno au_strerror au_write au_free_token au_close_token au_close_buffer au_close au_open au_to_header32_tm au_to_return32 au_to_return au_to_newgroups au_to_groups au_to_header32 au_to_header au_to_header32_ex_tm au_to_header32_ex au_to_header_ex au_to_subject32_ex au_to_subject_ex au_to_subject32 au_to_subject au_to_sock_inet32 au_to_sock_inet au_to_process32_ex au_to_process_ex au_to_process32 au_to_process au_to_ip au_to_in_addr au_to_data au_to_sock_unix au_to_arg32 au_to_arg au_to_me au_to_arg64 au_to_zonename au_to_sock_inet128 au_to_socket_ex au_to_path au_to_text au_to_opaque au_to_iport au_to_trailer au_to_exec_env au_to_exec_args au_to_ipc_perm au_to_ipc au_to_in_addr_ex au_to_exit au_to_seq au_to_file au_to_header64_tm au_to_header64 au_to_subject64_ex au_to_subject64 au_to_return64 au_to_process64_ex au_to_process64 au_socket_type_to_bsm au_bsm_to_socket_type au_domain_to_bsm au_bsm_to_domain // 20 `
bsm_socket_type.o/
bsm_user.o/ 1354612228 0 0 100644 3800 `
ELF 8 4 (
U( ]] E1uu}} tgtct_ F D$ $t C F!G!F1!t$$t U3 u
]u}]& ' UX tD$ D$ $Í& U$T $T Ít& ' UWVS,X E܅ X D$ $ D$tD$
$ t = #t5 ]\$$ t$\$t$$ \$t$$ Et Etu5E E܃,[^_]D$ $ X -ˉ<$1wUD$2 |$$E܃D$E$tE܉ $ D$wkt& ' UVSu ]tO$T vt'4$D$u$T [^]$T 1ۃ[^]Ít& U h E1U}]uu EDž Dž Dž Dž f D$ $t5@ D$Bt$$tE1U3 u?]u}]ÍD$ $ut$ $uv ' U1 W E$ D$ fP _]Í US$T E$T []
U1 W ` $\ d h l f \ _]Í ' U$T X t$X $T r /etc/security/audit_user : GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rel.text .data .bss .rodata.str1.1 .rel.rodata .comment .note.GNU-stack @ ; p ` % | + 0 2 C ? K - T d @
) X T & U < D O 2 b i 2 | \ %
$ + 3 l B I V j c P 1 r c ; bsm_user.c setauuser_locked fp mutex getauuserent_r_locked linestr user_delim user_ent_name.4796 u.4797 user_ent_name.4777 u.4778 getfauditflags __stack_chk_guard getacflg getauditflagsbin __stack_chk_fail fseek setauuser pthread_mutex_lock pthread_mutex_unlock fgets strrchr strtok_r fopen strlen strlcpy getauusernam_r strcmp au_user_mask getauusernam getauuserent_r getauuserent endauuser fclose P
+ A P Y l q ~ 7 ! L c # ` " | $ / 7 ; @ " Z _ n u & ) % 0 5 bsm_notify.o/ 1354612228 0 0 100644 1104 `
ELF T 4 ( U(E$uE ɉÍv 8Nt $D$ $ D$ ɉ Audit status check failed (%s) GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rel.text .data .bss .rodata.str1.4 .comment .note.GNU-stack @ o 0 % + 0 2 ? - H X
B o * 2 ; bsm_notify.c cannot_audit audit_get_cond __error strerror syslog
1
@
J R b bsm_mask.o/ 1354612227 0 0 100644 1816 `
ELF 4 (
¡ Uu @`tf9PPt& u]P]1Ðt& U$U t#J`tBdAdBd uÍt& ' US PD$h D$ $C CXCP[T$t> ҉S`tC`Bd Cd $h uA # []Ð& U}} ]]uutQ$ uAt81EuMEu=t& $ 1]u}]Ãt+$ ۋG#B 뾋 #X Etkv y [ GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rel.text .data .bss .comment .note.GNU-stack @ x % D + H 0 H - 9 u u I P ` + % 0 : @ 5 F W ] g l w ~ bsm_mask.c read_from_cache ev_cache audit_event_map_free flush_cache load_event_table mutex firsttime free setauevent memset getauevent_r malloc au_preselect pthread_mutex_lock pthread_mutex_unlock : H k E J O bsm_io.o/ 1354612227 0 0 100644 51604 `
ELF | 4 (
UED$ D$ $ D$ Ðt& US]D$ D$ $
\$ \$ D$ D$ $" []UD$ D$ D$ $+ Ð& USÃɉutRtst& t D$D$. $[]Ð\$ D$ D$ $K []É\$ D$ D$ $1 []É\$ D$
D$ $= fUT$D$] $Ít& U} ]ut T$D$. $]u]ÉT$D$f $]u]fUtT$D$. $ÉT$D$f $Ív ' USÃ $D$D$. []Ív ' UT$D$q $Ít& UWVS ɉUu [^_]ÉD$ 1D$ D$ $v fUD$y <$D$9uރ [^_]Í UT$UL$ $T$ÐUT$L$$Ð& U҉T$L$$Ðt& U҉T$L$$Ðt& USÃE} t
B<qv7[]Ät $D$D$. []É] M[]$ \$ D$ D$ $T \$ D$ D$ $c z\$ D$ D$ $ U\$ D$ D$ $~ 0\$ D$ D$ $ \$ D$ D$ $ \$ D$ D$ $/ \$ D$
D$ $ \$ D$ D$ $ w\$ D$
D$ $$ R\$ D$ D$ $ -\$ D$ D$ $ \$ D$
D$ $ \$ D$ D$ $ \$ D$ D$ $ \$ D$ D$ $ t\$ D$ D$ $ O\$ D$
D$ $ *\$ D$ D$ $ \$ D$ D$ $ \$ D$
D$ $F \$ D$ D$ $t \$ D$ D$ $ q\$ D$ D$ $
L\$ D$
D$ $8 '\$ D$ D$ $ \$ D$ D$ $m v UD$$Í U]ӋUuE}υt]u}]Ív $D$ SK Su]}]@U]]uE}M \$$t
]u}]ËU"W]. u}]g& UB<qw1$ & L$ D$ D$ $ ÉL$$> ÉL$ D$
D$ $ ÉL$ D$ D$ $ ÉL$ D$ D$ $ ÉL$ D$ D$ $ ÉL$ D$ D$ $ ÉL$ D$ D$ $ ÉL$ D$
D$ $ ÉL$ D$ D$ $ ÉL$ D$ D$ $ ÉL$ D$ D$ $ Ð& U]]uE}M \$$t9
W . ^]u}]UW ]. u}]t& ' U]]}Eu։M \$$=t)VN ;]u}]Ut& UFV . U,N V]u}]fU]]}Eu։M \$$t-V $ fB]u}]UV ]$ u}]f
U(]]}}uƉM( U\$<$ta, EP >5 E. PYE]}u]UEP UE. ]}Pu]& U]]uE}M< \$$ tYA W ,H W.
]u}]t& UW UW]. u}]'& UWVS ɉEt,19t!;tU$T$9u߃ [^_]Ð& U]]uE}MO \$$t9T WO _]u}]fUO W]u}] U]]}Eu։MY \$$]t)VN ]u}]ut& UfN V]u}] U]]}Eu։M^ \$$t)VN ;]u}]t& UN V]u}] UWVS EM]c $\$Ctl #W . Lt OW$z |% W O[ [^_]v UW . UOW$z UOW [^_]' UWVS EM]c $\$3twl W . <t W WOP [^_]UW . ~UW %UOW [^_] UWVS E]ME߹ E1]E E E E E҉EEE E E E f E fE \$$tI} uC} u,Et$$E3 u9Č [^_]Í& Et$$҉\$D$. 4$t& UH
M1ɀ} uƉ]t)T$D$. 4$E3 u1]u]Í]ڍEԉUԉ\$$E t$ $ UWVS E M] EEE$\$ W. e bEW$M :MWe EO W$? EW O$$ [^_]UW . _UW. UEW$M&UMW.UEO W$UEW O$E [^_]] ' UHuơ E1ɉ]t)T$D$. 4$E3 u1]u]Í]ڍEԉUԉ\$$E t$ $
UWVS EM] E$\$pto PMW 3| 0WM\t$$> WO [^_]=U3MW U MWOUOW [^_]0UWVS E M] EEE$\$y UW. 5~ 2EW$MV
MW5 MW W J [^_]fUW . 7UW. ]UEW$MUMWU|MWUeW M [^_]UVS` E1t;trt$ D$ D$ $ E3 `[^]ËD$ . $ EED$ED$t$$뵍& ] $D$ \$ED$ . D$\$$ t$$gt& UWVS EM] $\$ W $ W$ | W$ fR oWOa NWO(@y -W$$ fO [^_]NUDW $ U*W$ UW$ fyUWOUW$$ f UWO( [^_]QU]]}Eu։M \$$-t)V N ]u}]F U6V N]u}] ' UWVS E M] EEE$\$ uW. U REW$Mv *MWU WO 5 EO0W,$ EW4O8$ [^_]UW . /UW. UUEW$MUMWUtWO U]EO0W,$U@EW4O8E [^_] UWVS E M] EEE$\$ W. e bEW$M :MWe WO E MW,% W0M\ [^_]t& UW . GUW. mUEW$MUMWUWO /UuMW,U^W0M [^_]v ' UWVS EM] $\$tp W . _p " z $ډ [^_]U_W . Ux $ [^_]& ' UWVS EMUEEM$L$' Ex 1et$ D$ D$ $0 M\ $ډ
t$ D$ D$ $6 M9y v6]uUE\ $ډM9y wʋMu [^_]ËE [^_]L UWVS EMUEEM$L$= E@ 1et$ D$ D$ $F M\ $ډt$ D$ D$ $L M9y v6EuUE\ $ډM9y wʋEu [^_]ËE [^_]< UWVSӃ EMuS $t$ { wuC $ US. ^U{ t.1C0D$E<$D$C9ۍ& [^_]ËUnnEe El |$E$!C
< . D$ D$ <$ S. p|$$> { t(1C0D$E<$D$C9 [^_]zEo Ev t& E$UU?C
< D$ D$ <$ S. |$$> { 81CpD$E<$D$C9 E E (E] Ea Ez E < < D$ D$ <$
S. |$$> { R1CTT$ D$E<$D$C9 FD$ D$ <$g S. D|$$> { 1CD$E<$D$C9 >US. U{ P1CD$E<$D$C9% US. Up{ 1t& CTT$ D$E<$D$C9 ^US. U{ p1CpD$E<$D$C9Dt& Uɉ]Ӊuu$$tt$ $]u]É\$4$D$ ]u]Ív ' Uɉ]Ӊuu$$tt$ $]u]É\$4$D$ ]u]Ív ' UWVS EM] ED$ $E% iW ى JWىw +WىX Wى9 W ى W . o W$. M W(O,$ W0O4i [^_]UW ىUWىUjWىUTWىU>W ىU(W . yUW$. `UO,W($ "UW0O4 [^_]tt& UWVS EM] ED$ $PE% )W ىV
Wى7 Wى WىP W ى W . / lW$.
JW(. W,O0.g [^_]f UVW ىU@WىtU*WىUWىHUW ىUW . 9UW$. UW(. UW,O0 [^_]9' UWVS EM] ED$ $E% W ىm WىN Wى Wى mW ىQ NW . x ,W$. V
W(O,$ W0O4" [^_]!UW ىJU Wى4UWى~UWىUW ىRUW . UW$. UvO,W($ UXW0O4 [^_]t& UWVS EM] ED$ $U% W ى- Wى kWىO LWىy -W ىZ W . 8 W$. W(. kW,O0 [^_] UW ى
UWىUWى>UWىU~W ىUhW . UOW$. U6W(. U W,O0 [^_]' UWVS EM] E$\$ lMW LMW/x ,MWX MW8 W ! $ W . k( W$. I [^_]UMW UMWBUMWUMWUjW ! UQW . U8W$ . [^_]fUWVSÃ EM, EED$E$f~ e\$ D$ D$ $2 T ؋MM\$ D$ D$ $8 F 9~,MuUeT ؋MF 9ԃ [^_]fUWVS EM]? E$\$ W ! M MW
jMWMI JW. tN (O W $U MZ W$O($ }& [^_]%t& UW ! gUMW0UMWyUW. UO W $U UW$O(E [^_] ' UWVS EM]? E$\$ W ! } MW= MW}I zW. N XO W $U }Z 1W$. [ [^_]ZUPW ! U7MWjU MWU W. ZUO W $U UW$ . [^_] USÃ$\$$[]Í ' UWVS EM]a ED$ $E% W ىm WىN Wى Wى mW ىQ NW . x ,W$. V
O,W($ W0% [^_]$t& UW ىJU Wى4UWى~UWىUW ىRUW . UW$. UvW(O,$ UXW0 [^_]& UWVS EM]a ED$ $E W ى- Wى kWىO LWىy -W ىZ W . 8 W$. W(i kW,Q [^_]UW ىUWىUWىGUWىUW ىUqW . UXW$. U?W(. U&W, [^_]et& UWVS EM] $\$ W . ? \W. f~ 2Wa W. f7 W [^_]UW . UW. f^UWUW. f)UW [^_]& ' UWVS EM]m $\$t W . W. f" W< [^_]t& UW . 6UW. fUW [^_]v ' UWVS EM]y ED$ $ E% W ى] Wى> Wى |Wى ]W ىA >W . h W$. F O,W($ vW0| [^_]t& UW ى:UWى$UWىnUWىUW ىBUW . UW$. UfW(O,$ UHW0 [^_]& UWVS EM]y ED$ $E W ى ƾ zWى觾 [Wى?舾 <Wىi W ىJ W . ( ܿW$. } 躿W(. [W,Aڽ [^_]UW ىUWىUWى7UWىUwW ى UaW . 貿UHW$. 虿U/W(. 耿UW, [^_]Ut& UWVS EM] $\$蓿{ oW 耾虼 MW
^w +W. fM W. f躾# W. f萾 譽W 辽 苽W 蜽赻 iW. f"苻 ?Wn "W Q [^_]PUFW U-W
UW. f}UW. f\UW. f;UW rUW YUW. fU^WUJW [^_]' U]]}Eu։M \$$轼t V ?]u}]UV ]u}] ' U(ɉ]Éut! $D$D$. ]u]ED$4$u]Eu0\$ D$ D$ $ ]u]Í $ $D$ D$]u]Ét$ $D$ ]u]Í U(]]}}uƉM U\$<$ntjA NEP wH +EPH$U 褺ME]}u]Dt& U6EP vU E]}PHEU u]9' U(]]}}uƉM U\$<$~taA ^EP 臷H ;E. PٹbE]}u]YUOEP U5E. ]}Pu]w& U $t$|$] }uMU<qv,ډE EE $t$|$]ؽ$ ډE EE $t$|$]BډE EE $t$|$]ډE EE $t$|$]ډE EE $t$|$]^ډE EE $t$|$]RډE EE $t$|$]ډE EE $t$|$]:ډE EE $t$|$]ډE EE $t$|$]ډE EE $t$|$]ډE EE $t$|$]JډE EE $t$|$]~ډE EE $t$|$]2ډE EE $t$|$]fډE EE $t$|$]jډE EE $t$|$]~ډE EE $t$|$]2ډE EE $t$|$]&ډE EE $t$|$]ډE EE $t$|$]ډE EE $t$|$]ډE EE $t$|$]ډE EE $t$|$]jډE EE $t$|$]~ډE EE $t$|$]ډE EE $t$|$]&ډE EE $t$|$]
ډE EE $t$|$]ډE EE $t$|$]ډE EE $t$|$]鶿ډE EE $t$|$]jډE EE $t$|$]ډE EE $t$|$]ډE EE $t$|$]閿ډE EE $t$|$]:ډE EE $t$|$]NډE EE $t$|$]2ډE EE $t$|$]6ډE EE $t$|$]銷ډE EE $t$|$]& ' U]] uM}u}U<qv*ڋ]E EuE }]錶$l ڋ]E EuE }] $
D$ ٱS . 耱S. f`uK] }]lڋ]E EuE }]ڋ]E EuE }]ڋ]E EuE }]ڋ]E EuE }]ڋ]E EuE }]ڋ]E EuE }]ڋ]E EuE }]ڋ]E EuE }]\ڋ]E EuE }]ڋ]E EuE }]ڋ]E EuE }]οڋ]E EuE }]ڋ]E EuE }]ڋ]E EuE }]ڋ]E EuE }]ֹڋ]E EuE }]錸ڋ]E EuE }]ڋ]E EuE }]xڋ]E EuE }]^ڋ]E EuE }]Tڋ]E EuE }]Jڋ]E EuE }]дڋ]E EuE }]ڋ]E EuE }],ڋ]E EuE }]钵ڋ]E EuE }]xڋ]E EuE }] ڋ]E EuE }]tڋ]E EuE }]*ڋ]E EuE }]ڋ]E EuE }]vڋ]E EuE }]<ڋ]E EuE }]ڋ]E EuE }]鸴ڋ]E EuE }]ڋ]E EuE }]ڋ]E EuE }]麾ڋ]E EuE }]ڋ]E EuE }]v U $Ét$PB9v $t$]Í2@ ЋSfC B9Sr2SfCB9rKCBABAB CA 1뙉' U $Ét$PB9v $t$]Í2@ ЋSfC B9Sr2SfCB9r2CC1
U $Ét$Ή|$PB9v $t$|$]Í :Q A A S SB9ƉSr :Q A A SSB9ƉSr :Q A A SSB9ƉSL :Q A A SSB9ƉS :Q A A S SB9ƉS :Q A A S SB9ƉS :Q A A S$SB9ƉSl :Q A A S(SB9ƉS4J B BS K,St;B9K0C0BABAB CA 1B9:CC01t& ' U $Ét$Ή|$PB9v $t$|$]Í :Q A A S SB9ƉSr :Q A A SSB9ƉSr :Q A A SSB9ƉSL :Q A A SSB9ƉS :Q A A S SB9ƉS :Q A A S SB9ƉS :Q A A S$SB9ƉSl :Q A A S(SB9ƉS4:CC,1(fU $Ét$PB9v $t$]2SC B9r2SC
B9r2SfCB9r2SfCB9r2SfCB9r2SCB9q2SCB9Y2SfCB9@2SCB9)2CC 1 ' U $Ét$Ή|$PB9w6J B BS K St t. $t$|$]Ðt& B9r:CC1B9rKCBABAB CA 1U]ÉuΉ}PB9v]u}]Í :Q A A S SB9ƉSr:SCB9r:@ ЋSfCB9ƉSr:@ ЋSfCB9ƉS\ :Q A AK C SC A A A C SE B9 :Q A A ES,SSB9 :Q A AC 1S0~SB9k:SE C ]SE B9HC BABAB A SE SU(]ÉuΉ}PB9v]u}]Í:@D$h D$ fC CljEC<$Ei t)EEE9rUC|$$T$EC1z UWVS,}<$<E < E|$ D$ D$ $ EȃE $ƋE 0 ED$ 4$D$EV]FBBFZ|$ \$D$ $9o U $ & <t <y ,[^_]<uE|$ D$ D$ $vU|$ D$ D$ $vu|$ D$ D$ 4$tEf E$ËE ۉ EUC$D$D$ CD$E$D$ C D$D$ 4$E|$ D$ fD$C $Uf9rE,[^_]øU $ U(]ӉuΉ}PǍB9v]u}]Í Q A A W WB9ƉWrWGB9r@ ЋWfGB9ƉWr@ ЋWfGB9ƉW\ Q A AO G WG A A A G ) WE B9ډUMBEA EB ERUA U J J ȋME MMW0WO,WuB9jډUMBEA EB ERUA U J JG ȋM M܉M1W8O4WB9WE G WE B9ڋG BABAB A WE Wt& U]ӉuΉ}PǍB9v]u}]Í Q A A W WB9ƉWr Q A A WWB9ƉWr Q A A WWB9ƉWN Q A A WWB9ƉW Q A A W WB9ƉW Q A A W WB9ƉW Q A A W$WB9ƉWnډUMBEA EB ERUA U J J ȋMW,W MMB9ƉO(WJ B BW O0Wt;B9ڋO4G4BABAB GA 1B9GG41uU]ӉuΉ}PǍB9v]u}]Í Q A A W WB9ƉWr Q A A WWB9ƉWr Q A A WWB9ƉWN Q A A WWB9ƉW Q A A W WB9ƉW Q A A W WB9ƉW Q A A W$WB9ƉWnډUMBEA EB ERUA U J J ȋMW,W MMB9ƉO(WGG01& U\E]uu }}E~LG w<qvFE+GX Wf_ 9E _2G1ۍ& ؋u]}]Ð$4 WB;E @ ЋWfG 9ẺWl O1ۍ2G럋WB;EP Q A A W WB9ẺW Q A A WWB9ẺW Q A A WWB9ẺW Q A A WWB9ẺWrpU܋M܃ZA BR ÉUA U ] J J_ ȉW WB9ẺW v 6WB;EwWG B9Er֍ 1Q A AG WWB;EwWG B9ErU؋MZA BR ÉUA U ] J J_ ȉWWB9ẺW@ ЋWfG9ẺWO1ۍ2G WB;E 1ۃGG M̉]u}]bWB;EWG B9Ez։uFZ BR ÉUF ] N NG_1 ȉW\WB;E
Q A A W WB9ẺW Q A A WWB9ẺW Q A A WWB9ẺWb Q A A WWB9ẺW)UMZA BR ÉUA U ] J J_ ȉW WB9ẺW։uFZ BR ÉUF ] N NG_$1 ȉW(WB;EO Q A A W WB9ẺWWGB9E@ ЋWfGB9ẺW@ ЋWfGB9ẺWUЋMЃZA BR ÉUA U ] J J_ ȉW WB9ẺW@։uԃFZ BR ÉUF ] N NG_ 1 ȉW$"fWB;E Q A A W WB9ẺW Q A A WWB9ẺW_ Q A A WWB9ẺW& Q A A WWB9ẺW Q A A W WB9ẺW Q A A W WB9ẺW{ Q A A W$WB9ẺWBUMZA BR ÉUA U ] J J_( ȉW,WWB9E1ۃGG0t& WB;E Q A A W WB9ẺWx Q A A WWB9ẺW? Q A A WWB9ẺW Q A A WWB9ẺW Q A A W WB9ẺW Q A A W WB9ẺW[ Q A A W$WB9ẺW"UMZA BR ÉUA U ] J J_( ȉW,WB9ẺWJ B BW O0WT vB9EjO4G4B1ۉABAB A GfM̉]u}]M̉]u}]pM̉]u}]HM̉]u}] WB;E Q A A W WB9ẺW Q A A WWB9ẺW_ Q A A WWB9ẺW& Q A A WWB9ẺW Q A A W WB9ẺW Q A A W WB9ẺW{ Q A A W$WB9ẺWB Q A A W(WB9ẺW 1ۃGG,8M̉]u}]0M̉]u}]WB;E1ۃGfG WB;EWG B9Ey Q A A WWB9ẺW@@ ЋWfG9ẺWO1ۍ2GEWB;E@ ЋWfG B9ẺWWfGB9EWGB9EWfGB9E1ۃGGM̉]u}](M̉]u}]M̉]u}]xWB;E Q A A W WB9ẺW Q A A WWB9ẺW Q A A WWB9ẺWn Q A A WWB9ẺW5 Q A A W WB9ẺW Q A A W WB9ẺW Q A A W$WB9ẺW Q A A W(WB9ẺWQJ B BW O,W:B9EO0G0 WB;E 1Q A AG W WB;E Q A A W WB9ẺWe Q A A WWB9ẺW, Q A A WWB9ẺW Q A A WWB9ẺW Q A A W WB9ẺW Q A A W WB9ẺWH 1Q A AG W$YOY;]
@_ ЉfG EA 9Esf9E Q A A GT 9]PW1WB;Ex Q A AG
҉W 1҉GwDu /G9ẺG 8 uG G9w= .1G )WB;E Q A AG
҉W 1҉GwD8 G;ẺGr&v 8 G9ẺGUuLWB;E̍v :@ ЋWfG B9ẺW<
WB;E Q A A W WB9ẺWWGB9E@ ЋWfGB9ẺW@ ЋWfGB9ẺW\ Q A A WWB9ẺW# 1Q A AG W 4t& M̉]u}]WB;EWG B9E G@_
9EWG' G؍9Eb_1ۍGfWB;EA@ ЋWfG B9ẺW@ ЋWfGB9ẺWOR ffWOt
fA9EWffGWV B9EOGBABAB GA WB9EafWfG$: B9E<O(G(WB;E Q A A W WB9ẺWfWB;E Q A A W WB9ẺWG G9yt%v j t& B9E̐:GGB9E 1ۃGG4NB9E1ۃGG(1 </audit>
<?xml version='1.0' ?>
<audit>
" %u Message IPC Semaphore IPC Shared Memory IPC Error %u + %u msec %s=" 0x %02x <record </record> <argument <attribute <exit <exec_args> <exec_env> <file <group> <ip_address> <ip <IPC <IPC_perm <ip_port> <opaque> <path> <process <return <sequence <socket <socket-inet <socket-unix <socket-inet6 <subject <text> <arbitrary <zone unknown trailer /> </exec_args> </exec_env> </file> </group> </ip_address> </ip_port> </opaque> </path> </text> </arbitrary> sequence seq-num opaque ip port %#x IPC ipc-type ipc-id exit errval retval zone name text path argument arg-num value 0x%llx desc 0x%x header version event modifier time msec file invalid socket sock_dom sock_type lport laddr faddr fport ip addr ex header_ex host socket-unix type port addr exec env <env> </env> exec arg <arg> </arg> arbitrary hex %x string %c binary %c octal %o decimal %d print %zu count byte short int int64 %d subject_ex audit-uid uid gid ruid rgid pid sid tid %llu process_ex IPC perm creator-uid creator-gid mode %o seq key group <gid> </gid> attribute fsid nodeid %lld device subject %u socket-inet process ip service_type len id offset time_to_live protocol cksum src_addr dest_addr ip addr success failure : %s failure: Unknown error: %d return socket-inet6 = j e j j j j j j j j j j j j h : C @ j j b j j j j j j j j _ j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j j _ j j :
J ( l $ % $
% '# P I jP >P P I I I I I I I I I I I O O O bO I 6O
O N N N ZN .N N M M I I ~M I I I I I I I I RM &M L L I I I I I I I I I I I I I I I I I I I L I I I I I I I I I I I I I vL I I I I I I I I I I I I I I I I JL L K K K I nK I BK K J J J fJ :J J I I X P W W W P P P P P P P P P P P hW >W W V P V V lV BV V U U U pU FU P P U P P P P P P P P T T T tT P P P P P P P P P P P P P P P P P P P JT P P P P P P P P P P P P P T P P P P P P P P P P P P P P P P S S S xS NS P $S P R R R |R RR (R Q Q XQ .Q T l 4 s l l l l l l l l l l l n l x l z n l l o z z z {{ ~ l l ~ l l l l l l l l g !m l l l l l l l l l l l l l l l l l l l l l l l l l l l l l l l l l l l l l l l l l l l l l l l l l n o dp "r s l (| l @| X| | u @x Xx 0 px o x GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rel.text .data .bss .rodata.str1.1 .rel.rodata .comment .note.GNU-stack @ % І + І 0 2 І C ? K - T d 0 U E
( # ` 0 N = 6 J & V @ ` ` j j x 0 P = p i @
'
6
H C V e P t t p 0 q @ * @ p V P j @ | P! `" l ' V 0( V ( < * 7 - < P/ 7 1 p3 1 P4 B 6 S 7 # d 8 9 x P: + < > ? 9 `A + C `F w F G H , @X C X q Y PY u o [ ] ^ _ a d `g j 8 + " ) 0 P = E K Q c p I B P j Pb $ + 0 8 Pl ? bsm_io.c close_attr print_ipctype print_errval print_msec64 print_msec32 print_evmod open_attr print_mem print_8_bytes print_4_bytes print_2_bytes print_1_byte print_tok_type print_delim print_invalid_tok print_trailer_tok close_tag print_seq_tok print_opaque_tok print_iport_tok print_ipc_tok print_exit_tok print_string print_zonename_tok print_text_tok print_path_tok print_arg64_tok print_arg32_tok print_event print_sec64 print_header64_tok print_sec32 print_file_tok print_header32_tok print_ip_ex_address print_socketex32_tok print_inaddr_ex_tok print_header64_ex_tok print_header32_ex_tok print_sock_unix_tok print_execenv_tok print_execarg_tok print_arb_tok print_user print_group print_subject64ex_tok print_subject32ex_tok print_process64ex_tok print_process32ex_tok print_ipcperm_tok print_newgroups_tok print_attr64_tok print_attr32_tok print_ip_address print_subject64_tok print_subject32_tok print_socket_tok print_sock_inet32_tok print_process64_tok print_process32_tok print_ip_tok print_inaddr_tok print_retval print_return64_tok print_return32_tok fetch_sock_inet128_tok fetch_sock_inet32_tok fetch_process32ex_tok fetch_process32_tok fetch_ip_tok fetch_inaddr_ex_tok fetch_header32_ex_tok fetch_sock_unix_tok fetch_header64_ex_tok fetch_process64ex_tok fetch_process64_tok au_print_xml_footer fwrite au_print_xml_header fprintf fputs fputc __stack_chk_guard getauevnum_r __stack_chk_fail ctime_r __inet_ntop bcopy strlen getpwuid getgrgid __inet_ntoa au_bsm_to_errno strerror au_print_tok_xml au_print_tok memchr memcpy au_read_rec fgetc fread malloc memset free __error au_fetch_tok % V M V V q v V V X V - 2 V S X V n v X X X X X ' , X N V X V X X X % X E X X V V V , 1 V Q V V v { V V V V
V / 4 V T Y V y ~ V V V V
V 2 7 V W \ V | V V V V V 5 : V Z _ V V Y A w V Z V " V ? D V a f V V V V V
V -
2
V a
z
O < Y | !
:
W
f
Z A Z q " 7 K ^ $ 2 G T i [ \ Y [ Y X ] [ X ( [ I ^ Y Y ` ] D < [ T \ X e [ ^ Y ] 0 Z - N n K [ u z V [ _ Y ` _ Y ] 8 X f {
Q k
. N t > ^ h a a k V a V
! a {! ! ! V ! a ! ! V " a x" " " " " X *# 1# ># T# Y z# # # X # # # Z # X $ "$ 7$ a f$ }$ $ X $ $ $ Z $ X $ % % % #% *% L% c% k% X w% % % Z % X % & & X & *& H& Z p& X & & & X & ' P' X g' ' ' X ' b ' Y ( ( X H( c Z( Y s( x( X ( ( ( ) +) J) i) v) ) ) ) ) l* * * * + -+ L+ k+ + + + + + + + , , , (- N- m- - - - - - . . -. A. . / %/ h/ / / / /
0 )0 60 K0 X0 m0 |0 ,1 E1 ^1 1 1 1 2 +2 K2 X2 m2 z2 2 2 *3 C3 a3 3 3 3 V 3 3 V h4 4 4 4 4 4 4 5 #5 65 J5 ~5 5 5 6 86 [6 h6 }6 6 6 6 6 6 7 7 D7 7 7 7 7 d 7 Y (8 N8 m8 8 8 8 8 8 9 9 -9 A9 9 : %: h: : : : :
; ); 6; K; X; m; z; #< << W< < < < < < = "= 0= L= = = = (> D> R> g> u> > > > 8? ^? }? ? ? ? ? @ @ (@ =@ Q@ @ A 5A xA A A A A B 9B FB [B hB }B B 3C LC gC C C C D D 6D DD `D nD D D D D D E E E E F F G G X !G e GG LG V dG f oG xG X G G X G G H #H H H H H I _I I *Q dQ Q Q b i 9b j `b l b m b n b o c m 4c p 9c q ac q c m c m c m d n 0d ` Jd ` ad ` d m d p d q l Y $ ( , 0 4 8 < @ D H L P T X \ ` d h l p t x | $ ( , 0 4 8 < @ D H L P T X \ ` d h l p t x | $ ( , 0 4 8 < @ D H L P T X \ ` d h l p t x | $ ( , 0 4 8 < @ D H L P T X \ ` d h l p t x | $ ( , 0 4 8 < @ D H L P T X \ ` d h l p t x | $ ( , 0 4 8 < @ D H L P T X \ ` d h l p t x | $ ( , 0 4 8 < @ D H L P T X \ ` d h l p t x | $ ( , 0 4 8 < @ D H L P T X \ ` d h l p t x | $ ( , 0 4 8 < @ D H L P T X \ ` d h l p t x | bsm_fcntl.o/ 1354612226 0 0 100644 1208 `
ELF 4 ( U1U; tu] t ]Ív ' U1U& f; tu]Í t@uE 1]
k l m r Y GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rel.text .data .bss .rodata .comment .note.GNU-stack @ ( % + 0 8 ` - A Q
H F
6 2 @ H bsm_fcntl.c bsm_fcntl_cmdtab au_fcntl_cmd_to_bsm au_bsm_to_fcntl_cmd ' 0 T l bsm_event.o/ 1354612226 0 0 100644 5216 `
ELF X 4 (
U tD$ D$ $Í& U$ $ Ít& ' U8u5 ]]U؉}\$t$$\$t$$ E\$t$$ \$t$$ EU܅҉tt<$ v & E E؋]u}]ËUD$ |$B$EucUD$2 D$ B$E܉$Uft!ED$ $uEU؉B {E@ lE$1QUD$2 T$U؋B$fUVS]u $
tl D$ $ D$tfD$
$ t ڸ (tf;3u$ [^]D$ $ y1Ɛt& U1 W Up $p T$| f f t x _]US$ tpv D$ $ D$tmD$
$ t = #tU ]t5$ []D$ $ r1Ǎ& ' U1 W` P $P \ f f T X ` _]Ð& UVSu ]$ 9 tu D$ $ D$tuD$
$ t ڸ HtC4$D$u$ [^]D$ $ j1ƍ U1 W S]E R V Z ^ b f j fn fP R D$$ t f[_]Í& 1ۃ[_]Ðt& UE$ D$Ðt& U1 W E$ D$2 6 : > B F J fN f0 2 _]ÐU$ t$ $ r /etc/security/audit_event : GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rel.text .data .bss .rodata.str1.1 .rel.rodata .comment .note.GNU-stack @ [ % + 0 2 C ? X K - T d `
@
) " ( ` ^ 5 @ H 2 \ p c w ` 2 P 2 R 2 2 0 % ( ; P Y ` h m ~ 0 p P p ; bsm_event.c setauevent_locked fp mutex eventfromstr eventdelim linestr event_ent_desc.4841 e.4842 event_ent_name.4840 event_ent_desc.4781 e.4782 event_ent_name.4780 event_ent_desc.4851 event_ent_name.4850 e.4852 ep.4853 event.4861 event_ent_desc.4811 e.4812 event_ent_name.4810 fseek setauevent pthread_mutex_lock pthread_mutex_unlock strtok_r strlen strlcpy atoi getauditflagsbin getauevnum_r fgets strrchr fopen getauevnum getauevent_r getauevent getauevnam_r strcmp getauevnonam_r getauevnonam getauevnam endauevent fclose # 9 > J O k ! ! ! ! " # 7 B # M $ f % " # ' ! ( / D I Z a f ) m ! & & : ? E Q ` i ' | ( ) # - 7 A K U _ j s { + ' ( ' . 3 8 I P U ) \ | - ) \ e / } - ) . 3 ? 3 E P U bsm_control.o/ 1354612226 0 0 100644 7868 `
ELF 4 (
USÅۉu[]Ã <-wf$ 11
fU]]uΉ}ljU˅x;
|; tQt h t& ~Sst~y tT]u}]e thf|4 yE]u}]+duiƀQ 1뱅FIiQ i Љ117댐t& i 1x D
U$ t$ $ Í& ' Ux tH u@PED$$xE; t. $ É$븍t& D$ D$ $ÐU$ Y$ Ít& ' UWVSÃ,5 U 5 }t& D$ $ D$ = #tD$ $ = r#t&
t
t u
= s|$t$$ uD$ $a|$t$$ Ute1,[^_]Ë
u @ tٸԡ $D$ $ 닍 ' UWVS< }u ] E1 $ > > < < D$D$D$D$ D$D$+ $ tDf $ U3 < [^_]ÃYڋ$Xuڋ$;uD$E $t^ (ƅBڋ$C$ 1A$ +D$I $ $ v U($ UL l M < < t~UED$ T$D$S $t%t$f $ EBMUEuɋU= v9$ 1ÃMh$ $ $ fUVS u $ UY Gxf]t4 $9s@t$\$E$$ 1 [^]$ [^]$ $ 뻍v ' UVS u $ U^ xa]tG $9s(Et$\$$$ 1 [^]$ $ $
UVS u $ 4Ue xf]t4 $9s@t$\$E$$ 1 [^]$ [^]$ $ 뻍v ' UVS u $ Um 7xf]t4 $9s@t$\$E$$ 1 [^]$ [^]$ $ 뻍v ' UVS u $ Us xa]tG $9s(Et$\$$$ 1 [^]$ $ $ t& U$ 9Uw x;Et!$U$ 1Ít& $ $ Ív ' UWVS E E$Ǹt^}ED$ $tX 1ېt& D$4$t. u<$ [^_]ËU 돉<$1ސ& UWVS u E}Etl 1ۋU t9ut$D$ <$9v: t$<$D$9v 1 u} [^_] [^_] * * ' 9 0 @ r /etc/security/audit_control expire-after %lu%c%[ adnorADNOR]%lu%c and or filesz %ju%c host policy naflags flags dir minfree , : cnt ahlt argv arge seq windata user group trail path scnt public zonename perzone GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rel.text .data .bss .rel.rodata .rodata.str1.1 .comment .note.GNU-stack @ $ % D + ` 4 ` 8 0 < 2
K m - T d < > @ - 3 6 ? L [ P c q w x @ B ' - 4 : % @ F M V ] d j r ~ @ @
v
# ( p 4 bsm_control.c au_spacetobytes setexpirecond mutex fp ptrmoved setac_locked lastctime.5395 getstrfromtype_locked delim linestr au_polstr __mb_sb_limit _GLOBAL_OFFSET_TABLE_ _ThreadRuneLocale _CurrentRuneLocale _DefaultRuneLocale endac pthread_mutex_lock fclose pthread_mutex_unlock __isthreaded fstat fileno fseek setac fgets strchr strtok_r strcmp ferror fopen __error getacexpire __stack_chk_guard sscanf strcasestr __stack_chk_fail getacfilesz getachost strlen strlcpy getacpol getacna getacflg getacdir getacmin atoi au_strtopol strdup strsep free au_poltostr strlcat # c ! & I N S Y f l w | ) . : ? ] t " # $ % / $ H Q k s &
' ( *
q
y + *
, V [ i n } -
,
+ 1 ( > C w | ( (
0 / 1 6 ; K P c h v {
0 1 ! & N S `
x 0 1
( 0 ? 1 F K [ ` s x
0 1
,
1
I
N
[
s
7
9
: % & 2 ; 7 ( T ` ;
= = 0 $ ( , 0 4 8 < @ D H L P T X \ ` d h l p t x |
$
,
bsm_flags.o/ 1354612226 0 0 100644 2176 `
ELF 4 (
UWVS|E]} u U1҉ $EE E E E E D$H D$ uu]]4$tuUt#G9 !9 u +tEtUED$H $D$E$ ,X4$u;]tC 1U3 uB|[^_]ÐED$ $D$E$멨r-gfUWVS E} ] U1ҍuE EE E E E D$H D$ $E G D$Eu]T$$uL & tE!t E!Gt& UT$$ D$tz1^tV+tA- tWUD$$tfutE tE G딍t& 뿍 띍v 1U3 u Č [^_] , GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rel.text .data .bss .rodata.str1.1 .rel.rodata .comment .note.GNU-stack @ % + 0 2 C ? x K $ - T Q Q d `
N ) ; B M ] e l } P bsm_flags.c flagdelim getauditflagschar __stack_chk_guard memset setauclass getauclassent_r strlcpy strlen __stack_chk_fail getauditflagsbin strtok_r getauclassnam_r __error Z h
t # . J g ( T bsm_class.o/ 1354612226 0 0 100644 3920 `
ELF 4 (
U$ t$ $ Ðt& U tD$ D$ $Í& U$ $ Ít& ' UWVS, E܅ D$ $@ D$t=@ #tD$
$@ t 5 ]\$$@ t$\$t$$ E\$t$$ ËEttu5E E܃,[^_]D$ $ -ˉ<$wUD$ |$$ $GwUD$H \$B$ED$ D$ $U܉B_& UWVS }u $ it9su [^_]$ [^_]Í& ' UD$H D$ $ h l E$ h D$Ív UD$H D$ $ ( , $ ( 2$ Ív ' US$ E$ []
UWVS1ۃ u }t<$ Jt4$D$u$ [^_]Ðt& UD$H D$ $ p t x E$p p x D$ r /etc/security/audit_class : GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rel.text .data .bss .rodata.str1.1 .rel.rodata .comment .note.GNU-stack @ p % + @ 0 2 C ? H K $ - T Q Q d
@ ) ( h ? @ G R H f m h H ( H p ; ! ' p % 2 8 @ I O V ^ f R v p } 1 [ 0 } bsm_class.c mutex fp setauclass_locked getauclassent_r_locked linestr classdelim class_ent_desc.4814 c.4815 class_ent_name.4813 class_ent_desc.4767 c.4768 class_ent_name.4766 cp.4769 class_ent_desc.4795 c.4796 class_ent_name.4794 endauclass pthread_mutex_lock fclose pthread_mutex_unlock fseek setauclass fgets strrchr strtok_r fopen strlen strlcpy strtoul getauclassnum_r getauclassnum memset getauclassent getauclassent_r getauclassnam_r strcmp getauclassnam % 0 5 G c y ~ ! 5 ! K ! v } " # $ # $ % " ' O T ( & # - 7 @ ( G M Q W [ ` e q v {
, I O Y c m w ( + bsm_wrappers.o/ 1354612228 0 0 100644 10108 `
ELF T 4 ( UE $ D$ED$Í& ' UE $ D$ED$Í& ' UED$ $ D$Í ' U} 8u D$8 E$ D$ Ðt& U} 8u D$8 E$ D$ Ðt& U} 0u D$0 E$ D$ Ðt& U} 8u D$8 E$ D$ Ðt& U} u D$ E$ D$ Ðt& U} u D$ E$ D$ Ðt& U} u D$ E$ D$ Ðt& U} u D$ E$ D$ Ðt& U} u D$ E$ D$ Ðt& U} u D$ E$ D$ Ðt& U} u D$ E$ D$ Ðt& U} u D$ E$ D$ Ðt& U} 0u D$0 E$ D$ Ðt& U} 0u D$0 E$ D$ Ðt& U8} uu] D$ t$$$ u ؋u]]8uEFEFEF EFD$ $ EED$ËEEFEFEF EF |t& U8} uu] D$ t$$# u ؋u]]8uEFEFEF EFD$ $ EED$ËEEFEFEF EF |t& U(uu]D$ $" t$u؋u]]Í& 8uEED$ D$$ ËE؋u]]Ív U(uu]D$ $! t$u؋u]]Í& 8uEED$ D$$ ËE؋u]]Ív U(uu]D$ $& t$u؋u]]Í& 8uEED$ D$$ ËE؋u]]Ív U(uu]D$ $% t$u؋u]]Í& 8uEED$ D$$ ËE؋u]]Ív UWVS E] }fEEE
t\$$p t|$4$ ED$E$ D$4$t,ED$ 4$D$1҅U [^_]É $ED$ 4$D$D$ D$$ $ ED$ 4$D$D$ D$? $ u $<$D$ D$ $ ?<$ED$ 4$D$D$ D$ $ $<$ED$ 4$D$D$ D$# $ D$ D$[ $ t& UVS ut8E $tLUD$D$ \$T$$ [^]D$q D$ $ ։ $D$q D$ $ 뫍v U8E]uu}} EE0D$ E,D$E(D$E$D$E D$ E D$ED$E$t6<$tXUEƋ}] uE]UE]D$ D$ $ ]u}]É $D$ D$ $ ȍv U8E UD$$D$ D$(E D$D$ $D$ ED$ED$ED$E D$fUS]t,U D$D$ D$ T$$[]D$ D$ $ ' UVS E,u ]D$ E(D$E$D$E D$E D$ ED$ED$E$t%E E E uE [^]D$ D$ $ [^]Ít& U(MtOEE E D$ EE D$ D$ L$D$ $1҅uɉ $D$ $ D$ ' Ux]]ut$ut$$ uE1]u]8 uBt$$G t $D$T $ D$ $D$3 $ D$ y ' US]t $t[]ÍCE[]t& ' UWVS EU|Ef U1҈$ D$0 $g NjT$ |$|$t$ T$D$E \$$ D$$ |tWE D$ |D$ $D$ $ D$$) $UT$$ D$$ D$ D$$ 1U3 e Ĝ [^_]8Ntڐt& $D$g D$$# 뛍t& T$ \$\$|$ T$D$E t$$ID$ $# & 8N $ Dž $D$ D$ $D$ $# D$D$ D$$ $D$ D$$D$D $# D$ $D$ D$ $# D$ D$$ E $D$ $# D$D$ $D$D$l $D$ D$ audit_write() %s: au_open() failed %s: write of subject failed %s: au_to_return32() failed %s: au_close() failed audit_write_failure_self() %s: au_to_me() failed %s: au_to_text() failed audit_write_failure() %s: au_to_subject32() failed audit_write_success_self() audit_write_success() sysctl() failed (%s) fstat() failed (%s) /dev/console stat() failed (%s) audit: auditon failed: %s audit: au_open failed: %s audit: getaudit failed: %s audit: au_write failed: %s audit: record not committed %s: write of caller token failed %s: write of return code failed audit: unable to build subject token audit: failed to generate text token audit: enable to build return token audit: getaudit_addr failed: %s GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rel.text .data .bss .rodata.str1.1 .rodata.str1.4 .comment .note.GNU-stack @
% + 0 2 ? 2 N - W g 4 P p " & 0 " 4 ` # G ; V ^ ; m ; P ; ; ; ; P ; ; ; ; P ; ; ( ; 9 I Y } j } { } } + `
$ 4 P ^ K c d x `
0 5 p F
# + 5 E V _ bsm_wrappers.c audit_get_car auditon audit_get_cwd audit_send_trigger audit_set_stat __error audit_get_stat audit_get_sinfo_addr audit_get_pinfo_addr audit_get_pinfo audit_set_pmask audit_set_fsize audit_get_fsize audit_set_kmask audit_get_kmask audit_set_class audit_get_class audit_set_kaudit audit_get_kaudit audit_set_qctrl audit_get_qctrl audit_set_policy audit_get_policy audit_set_cond audit_get_cond audit_write au_open au_write au_to_return32 au_close au_free_token syslog audit_write_failure_self au_to_me au_to_text audit_write_failure au_to_subject32 audit_write_failure_na audit_write_success_self audit_write_success audit_set_terminal_host sysctl strerror audit_set_terminal_port fstat stat audit_set_terminal_id audit_submit __stack_chk_guard getaudit_addr getpid getgid getuid getegid geteuid vsnprintf au_errno_to_bsm au_to_subject_ex getaudit __stack_chk_fail
L
}
3
: s
z
3
: s
z
3
: s
z
=
T
Q
w
3
Q v
3
Q v
# $ $ % $ 2 & N ' f & n v ( & ( ' ' ( ' & % - 9 ( K ' S ' k & s { ( ( * +
"
'
( 6
' >
F
R
(
-
+
( & ' . 6 B ( , * " ( g - (
2 &
0
3 8
H
(
5
6
3
(
3 ( G 4 9 ! # : ; & < 1 = 8 > ? ? r - $ @ + $ A % 0 $ Y & l 9 3 ( ; < = > ? $ B . 8 D ( I a x C D 3 3 ! 1 ( R & W h o y 3 ( & ( & # * 4 3 < L ( m & r 3
" " a 1 bsm_errno.o/ 1354612226 0 0 100644 7896 `
ELF T 4 ( U1҉1Mt& t!; uR t ]] Ív ' U11t& t; u]I ]1Ív ' UEu]Ë@=tU 1]Ðt& UE tPt
Ut& Pɉ Unrecognized BSM error Success Operation not permitted No such file or directory No such process Interrupted system call Input/output error Device not configured Argument list too long Exec format error Bad file descriptor No child processes Cannot allocate memory Permission denied Bad address Block device required Device busy File exists Cross-device link Not a directory Is a directory Invalid argument Too many open files in system Too many open files Text file busy File too large No space left on device Illegal seek Read-only file system Too many links Broken pipe Result too large No message of desired type Identifier removed Channel number out of range Level 2 not synchronized Level 3 halted Level 3 reset Link number out of range Protocol driver not attached No CSI structure available Level 2 halted Resource deadlock avoided No locks available Operation canceled Operation not supported Disc quota exceeded Invalid exchange Invalid request descriptor Exchange full No anode Invalid slot Bad font file format Process died with the lock Lock is not recoverable Device not a stream Machine is not on the network Package not installed Link has been severed Advertise error srmount error Communication error on send Protocol error Locked lock was unmapped Facility is not active Multihop attempted Bad message File name too long Given log name not unique Remote address changed Illegal byte sequence Function not implemented Restart syscall Directory not empty Too many users Destination address required Message too long Protocol not available Protocol not supported Socket type not supported Protocol family not supported Address already in use Network is down Connection reset by peer No buffer space available Socket is already connected Socket is not connected Operation timed out Connection refused Host is down No route to host Operation already in progress Operation now in progress Stale NFS file handle Too many processes RPC struct is bad RPC version wrong RPC prog. not avail Bad procedure for program Authenticateion error Need authenticator Attribute not found Programming error Just return do direct ioctl in GEOM Device power is off Device error Bad executable Bad CPU type in executable Malformed Macho file Operation failed by policy RFS specific error Structure needs cleaning Not a XENIX named type file No XENIX semaphores available Is a named type file Remote I/O error No medium found Wrong medium type Required key not available Key has expired Key has been revoked Key was rejected by service Resource temporarily unavailable Operation not supported by device Inappropriate ioctl for device Numerical argument out of domain Too many levels of remote in path Value too large to be stored in data type Given f.d. invalid for this operation Can't access a needed shared lib Accessing a corrupted shared lib .lib section in a.out corrupted Attempting to link in too many libs Attempting to exec a shared library Too many levels of symbolic links If pipe/FIFO, don't sleep in stream head Socket operation on non-socket Protocol wrong type for socket Address family not supported by protocol family Can't assign requested address Network dropped connection on reset Software caused connection abort Can't send after socket shutdown Too many references: can't splice Inappropriate file type or format ioctl not handled by this layer Shared library version mismatch 7 Q a y
#
' = I U $ g w H " 1 ! ! h " " = # S N $ R i % | & ' ( ) * + , - . . M H / U [ 0 - n 1 E 2 3 4 5 6 7 8 . 9 : ; < 2 @ F A d B G C [ z D E F G \ H I J Z M Y N ? ( O T P ; Q R U S T ( U L V l W X V l Y N Z > [ \ ] B ^ D _ & ` ' a ( b ) $ c * x + y , * z - n { . D | / D } 0 b ~ 1 t 2 y 4 5 6 7 8 9 : ; < = @ A $ % 5 $ S F m C H I J K L O $ P Q W X % 7 H C [ o | h < Q b r GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rel.text .data .bss .rodata.str1.1 .rodata.str1.4 .rel.rodata .comment .note.GNU-stack @ 8 % 8 + 8 0 2 8 ? 2 R N Z - c s
b
P 6
- F = + M 7 Y bsm_errno.c bsm_errnos bsm_lookup_errno_bsm au_errno_to_bsm au_bsm_to_errno au_strerror strerror 0 9 p } , 8 D P \ h t ( 4 @ L X d p | $ 0 < H T ` l x , 8 D P \ h t ( 4 @ L X d p | $ 0 < H T ` l x , 8 D P \ h t bsm_audit.o/ 1354612226 0 0 100644 3856 `
ELF 4 ( US] tE t: u []ËKJA= w#B C JC B CB 1[] 뵍t& US]t"t$][]& []Ív ' U]]uuS;v" $ ]u]ËT$D$E $C $1
UWVSÃ\EE E D$0 $ 8Nf {D$ D$<$ƅ <$ CFt{SFB CF C ssA {A C AC [t C4$T$D$s[u1\[^_]8O\[^_]ÍFC 농ED$ $xԋEȃ uË}̅uMЅuUԅu Eغ t& C<ED$EUD$ <$D$ ƉT$D$4$"}҃덍v UVSXu&3C B C $ $^tSuՋC F F $ p Ft p VP F p 5p $ [^]Í ' UVSEU tV; tQC-= wM;v]D$ D$ $ [^]Ít& [^]Í& ҉xS1CT$D$E$CU딐& UE]Uu t; u ]u]ÐE 1t7C-= w=҉`xCD$C$ƍv ]u]á D$ D$ $ D$
US$ p t^StC B C $ CD$ D$ $SCC C C []$ $ t$ Cth$ t;C $ T$ p $ C$ $ = au_close_buffer failed %zd au_close failed GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rel.text .data .bss .rodata.str1.1 .comment .note.GNU-stack @ 0 % + t 0 2 + ? - H 8 8 X H @
V
P 0 ) 5 ; p H X | a i 6 w | a " * p 3 9 @ P C H O bsm_audit.c open_desc_table au_assemble au_teardown mutex audit_free_q audit_rec_count au_write __error au_free_token free au_close_token memcpy audit_get_kaudit au_to_header au_to_trailer gettimeofday au_to_header32_ex_tm pthread_mutex_lock pthread_mutex_unlock au_close_buffer __stderrp fprintf au_close audit fwrite au_open memset malloc " k Z g K $ , S X ] i v |
Z
) . Z _ d r " # # * 4 9 > J P Y b g r z bsm_token.o/ 1354612228 0 0 100644 16808 `
ELF `1 4 (
UE Uu}}fEE]fU$ Eu]u}]Í& @ $ É P@ K
@ @ f@ ECEBEBEBEUC fCESMbfCEC E C
E)AEAEACЍKAAQ4$1& U]uu$ u؋u]]Ív @ $ tE Qf@ 'AE AE BE BE B؋u]]É $1녍t& UEE]UWVS EfE$ u
[^_]E4 Ew4$Étht$D$ $;EufCEC~1ɋE DDDT9uԃ [^_]É<$1^t& ' UE$ D$Ðt& U8E]]uu D$ $1҃t)EUD$ ÉD$ƉD$ET$$]Ћu]Í ' UE UE U]' U(E }} uU]ufEEfUEGt E tE]u}]Ð$ Et܋GUBG$ËEۉ GD$ $D$SEK
CEBEBEBC EfCUSEfCEC WC
AAQKt^GCMbE KE)CECECCAAQGWCB ABAB A 닉$E & ' UhEuu}} ]D$ $tY]D$0 $u8EU\$D$ ƉD$ljD$ET$$]u}]8Nt1EUD$ ƉD$ljD$ET$$뼍t& ' UE UE U]' UWVS U$uB% $ @5 $5
E }1 s E zMABBBE ʃAE BE BM JEuUF E BEBEBE
F
EBEBMJEFEBEBEBE FE BE BM JE FE BE BE Bu$}G AAQV!G!AAQ~t'U$MBA% [^_]ÐE nt& FG%BABAB A [^_]1 [^_]f$ t@) $)
E $1 [^_]Ít& U]& U$ ]u}u؋u]}]@% $% ƉC 1 VN E$FEBEBEBE VFE BE BE BEV F EBEBEBEV
F
EBEBEBEVFEBEBEBE VFE BE BE BE VFE BE BE B}$F AAQGF! $1
U]& US$ u[]@ $ t8 @ @ MAB BAfBAB[]É $1U]& UWVS u$F $ @5 $5
E }1 g E {EMAEBEBEBE ʃAE BE BM JE}UG E BEBEBE
G
EBEBMJEGEBEBEBE GE BE BM JE GE BE BE BG AAQVG!AAQFG%~t1 [^_]E {t& 1 [^_]ËF G)FG-FG1 [^_]$ t@) $)
Et& $1 [^_]Í U]& U$ ]u}u؋u]}]@% $% ƉC 1 VN E&FEBEBEBE VFE BE BE BEV F EBEBEBEV
F
EBEBEBEVFEBEBEBE VFE BE BE BE VFE BE BE B}$F AAQGF! $1
U]& U]u$ u؋u]]Í @ $ tX P@ @ @ @ @ +uAFBFBF B FB؋u]]É $1l& ' US$ u[]@ $ t @ *MB[]É $1봍t& ' U(uEu U]E<}U t*t& 1 ]u}]ú E$ ЉUtЋEGE$É UD$ $T$ESU!CET$UCCT$$ef m ] Jv !<$1 t& ' U$ u]}u]u}]Ë}<$F<$$ÉtS<$ $D$ D$C UBC<$|$ $D$o4$1t& \t& ' U(EU u]}$E$ fEu]u}]Eǃ~E<$Éts|$D$ $EU-CESSBEBEBUESUfCC$T$U T$_4$1P& UEE]U E]u}D$0 $ueẺEEUT$ U|$t$ \$T$UD$ET$$]u}]8Nt1E؉$u}EEUT$ U|$\$ t$T$UD$E؉T$${v ' U8EU}]EEUU uE$$ fEu]u}]Eƃ wE܉4$É t$D$ $UKqSUЉCAAQUKCAAQEUfC
ET$U C C T$$<<$1-& U(Eu]}$$ fEu]u}]U׃xU<$ÉtD|$D$ $EU`fCET$UCCT$$뎉4$1끍& ' U$ u]}u]u}]@ $ Étn K@ @ @ @ @ @ UBCRfSCGCBABAB A h4$1Y& UWVS,uE ffE f $ 3 @+ $+ ẺEԉ0 }̹
1f G }̋ŰM̋Ẽ}܋}̃U؋ŨMM̃}}̃EU ME Ɖ$M؉fUE҉$M܉ffU E UMuAʃfAOBGBGB G UBfGuUFGBABAB A ,[^_]ÿ E E E E E E E E M uUMBfBuFfGFG,[^_]Ív 1 ,[^_]$ U@ $ ljEԉtf @ @ @ f@ @ GWOE؍GUWM܍OEG UME+ $1 $1볍v U(Eu]}$$ fEu]u}]U׃xU<$ÉtD|$D$ $EU#fCET$UCCT$$뎉4$1끍& ' U(Eu]}$$ fEu]u}]U׃xU<$ÉtD|$D$ $EU(fCET$UCCT$$뎉4$1끍& ' U(E u]}fE$ u]u}]U׃xU<$ÉtD|$D$ $EU)fCET$UCCT$$뎉4$1낉' U]uu$ u؋u]]f@ $ t"f ,fBB؋u]]É $1멍& US$ u[]@ $ tH Pf@ @ @@EAEBEBEB[]É $1UWVS1ۃ UE t"t& $UEM\u$ Eu E [^_]Ísp4$MÉ t$D$ $S=ECEBEBEB}~s1U $4$\$D$ $;}uʋE [^_]É $E ;t& ' UWVS1ۃ UE t"t& $UEM\u$ Eu E [^_]Ísp4$MÉ t$D$ $S<ECEBEBEBE~s1U $4$\$D$ $;}uʋE [^_]É $E ;t& ' Uu]$ u]u]Í @ $ É, H@ @ @ 2@ @ @ @ EPCAAQEKP CAAQEK C AAQEK
PC
AAQKC C EPC C fCSEPfCSEPCAAQ]u]É4$1 U]uu$ u؋u]]Ív @ $ tE Qf@ "AE AE BE BE B؋u]]É $1녍t& U]u$ u؋u]]Í @ $ te Q@ @ @ @ @ ~@A @ @ @uAFBFBF B ؋u]]É $1_US$ u[]@ $ tf P@ @ RE AE BE BE BEQAEBEBEB[]É $1h
US$ u[]@ $ t: P@ /EAEBEBEB[]É $1뗍& ' U(E U}]EEUu$$ fEu]u}]fUփ pU4$É t$D$ $EMb} KECE+UAEAEACЍKAAQUES
UfC C $T$UT$.<$1 U8E UM]]u}fEfUM$ u]u}]Í& @ $ lj# P@ @ @ @ @ f@ tEGEBEBEBEUMG fGEWO fGG
EMbE )ډU EЉЉUԉшG
EHHOPUЉGAAGQWG @ @ @ EGEBEBEB4$1
U8E]]uu D$ $1҃t)EUD$ ÉD$ƉD$ET$$]Ћu]Í ' UWVS U$uBE # $ @9 $9 E8 }1 E |MABBBE ʃAE BE BM JEuUF E BEBEBE
F
EBEBMJEFEBEBEBE FE BE BM JE FE BE BE BU$
F !@ @ @ F!BBJu$}%VG%AAQ)~t-U$MBA) [^_]Í& E Nt& FG)BABAB A [^_]1 [^_]f$ t@- $- E $1 [^_]Ít& U$ ]u}u؋u]}]@) $) ƉY 1
V EuFEBEBEBE VFE BE BE BEV F EBEBEBEV
F
EBEBEBEVFEBEBEBE VFE BE BE BE VFE BE BE BU$F
V!F @ @ @ F!BBJ}$GF%y $1j' U(E Uu}}]EU$ u]u}]Ð@
$
Étd H@ f@ rPUЉCAAQUKCAAQq4$1bfUWVS U$uB( $ @9 $9 E }1 E }MABBBE ʃAE BE BM JEuUF E BEBEBE
F
EBEBMJEFEBEBEBE FE BE BM JE FE BE BE BU$
F !@ @ @ F!BBJu$}%VG%AAQFG)~t3 [^_]fE ^t& 1 [^_]ËF G-FG1FG5 [^_]$ t@- $- Et& $1 [^_]Í U$ ]u}u؋u]}]@) $) ƉY 1
V EwFEBEBEBE VFE BE BE BEV F EBEBEBEV
F
EBEBEBEVFEBEBEBE VFE BE BE BE VFE BE BE BU$F
V!F @ @ @ F!BBJ}$GF%y $1j GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rel.text .data .bss .comment .note.GNU-stack @ 0 H; ` % 0 + 0 0 0 - 9 1 1 I 2 7
H & + P : G W ^ k c z ` @ p
&
8 H t [
l
| P ` e 5 % 1 @ S ` c t @ y P p ! ! " @# % # 0 $ B & c Q ' d ) t + P, . bsm_token.c au_to_header32_tm malloc free au_to_return32 au_to_return au_to_newgroups memset au_to_groups au_to_header32 gettimeofday au_to_header au_to_header32_ex_tm au_to_header32_ex audit_get_kaudit __error au_to_header_ex au_to_subject32_ex au_to_subject_ex au_to_subject32 au_to_subject au_to_sock_inet32 au_to_sock_inet au_to_process32_ex au_to_process_ex au_to_process32 au_to_process au_to_ip au_to_in_addr au_to_data memcpy au_to_sock_unix strlen au_to_arg32 au_to_arg au_to_me getaudit_addr getpid getgid getuid getegid geteuid getaudit au_to_arg64 au_to_zonename au_to_sock_inet128 au_to_socket_ex au_domain_to_bsm au_socket_type_to_bsm au_to_path au_to_text au_to_opaque au_to_iport au_to_trailer au_to_exec_env au_to_exec_args au_to_ipc_perm au_to_ipc au_to_in_addr_ex au_to_exit au_to_seq au_to_file au_to_header64_tm au_to_header64 au_to_subject64_ex au_to_subject64 au_to_return64 au_to_process64_ex au_to_process64 0 _ ? g B ^
A "
" f ~ L i H h X
9 V
;
T
v
8 t / P # F
u $
& & # 3 & J
f & y $ &
q $ * + , - . / / C 0 O + W , _ - f . m / & 7
$ & % A
o $ { O * 5 F 6 Q o & & 9 e
$ & % A
o $ {
% $ 1 X J t &
& 3 $ ; & U &
= & S $ [ & u ! 7! _! ! ! ! v" " " (# O# p# # # & $ 3$ S$
$ $ $ % O% & & & D <' Y' X) x) ) ) ) ) n+ + + E, |, , a. . . . / // 0
s u
U ' /0 1354612228 0 0 100644 1128 `
ELF 4 ( U1U; tu] t ]Ív ' U1U& f; tu]Í t@uE 1] GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rel.text .data .bss .rodata .comment .note.GNU-stack @ @ ( % + 0 ( 8 - A 5 5 Q @
P ( $ 6 : @ H bsm_socket_type.c bsm_socket_types au_socket_type_to_bsm au_bsm_to_socket_type ' 0 T l bsm_domain.o/ 1354612226 0 0 100644 1588 `
ELF h 4 ( U1U At ; u t ]] fU1U
t& Atf; u u]Ë@uE 1]
! " # $
GCC: (GNU) 4.2.1 20070831 patched [FreeBSD] .symtab .strtab .shstrtab .rel.text .data .bss .rodata .comment .note.GNU-stack @ ( % + 0 8 - A Q
< > + @ H bsm_domain.c bsm_domains au_domain_to_bsm au_bsm_to_domain ( 1 \ e