--******************************************************************************************************************** -- Created: 9-Mar-2021 22:28:31 by OpenVMS SDL EV3-3 -- Source: 12-DEC-1995 10:13:13 $1$DGA8085:[LIB_ADA.LIS]NSAEVTDEF.SDL;1 --******************************************************************************************************************** with SYSTEM; use SYSTEM; with STARLET; use STARLET; with CONDITION_HANDLING; use CONDITION_HANDLING; package NSAEVTDEF is -- module $NSAEVTDEF --+ -- Non-Discretionary Security Auditing event definitions. This macro defines -- the bits which are used to enable alarm and audit events for each class of -- system security relevant event. This definition also defines the format of -- the mandatory process auditing event vectors. --- NSA_S_NSAAXPDEF : constant := 40; -- Old size name - synonym type NSAAXP_TYPE is record FILLER_1 : UNSIGNED_BYTE_ARRAY (1 .. 8); -- preserve pre-V6.0 layout EVT_FAILURE : UNSIGNED_LONGWORD; -- Access failures event mask EVT_SUCCESS : UNSIGNED_LONGWORD; -- Successful access event mask EVT_SYSPRV : UNSIGNED_LONGWORD; -- Success due to SYSPRV event mask EVT_BYPASS : UNSIGNED_LONGWORD; -- Success due to BYPASS event mask EVT_UPGRADE : UNSIGNED_LONGWORD; -- Success due to UPGRADE event mask EVT_DOWNGRADE : UNSIGNED_LONGWORD; -- Success due to DOWNGRADE event mask EVT_GRPPRV : UNSIGNED_LONGWORD; -- Success due to GRPPRV event mask EVT_READALL : UNSIGNED_LONGWORD; -- Success due to READALL event mask end record; for NSAAXP_TYPE use record FILLER_1 at 0 range 0 .. 63; EVT_FAILURE at 8 range 0 .. 31; EVT_SUCCESS at 12 range 0 .. 31; EVT_SYSPRV at 16 range 0 .. 31; EVT_BYPASS at 20 range 0 .. 31; EVT_UPGRADE at 24 range 0 .. 31; EVT_DOWNGRADE at 28 range 0 .. 31; EVT_GRPPRV at 32 range 0 .. 31; EVT_READALL at 36 range 0 .. 31; end record; for NSAAXP_TYPE'SIZE use 320; NSAAXP_TYPE_INIT : constant NSAAXP_TYPE := (FILLER_1 => (others => 0), EVT_FAILURE => 0, EVT_SUCCESS => 0, EVT_SYSPRV => 0, EVT_BYPASS => 0, EVT_UPGRADE => 0, EVT_DOWNGRADE => 0, EVT_GRPPRV => 0, EVT_READALL => 0); NSA_K_NUM_OBJECT_ACCESS : constant := 8; -- number of privileged access arrays NSA_M_EVT_CREATION : constant := 16#00000001#; NSA_M_EVT_DEACCESS : constant := 16#00000002#; NSA_M_EVT_DELETION : constant := 16#00000004#; NSA_K_NUM_ACC_OTHER : constant := 3; -- number of "other" bits NSA_K_ACCESS_LENGTH : constant := 36; -- size of object access event mask NSA_S_NSAACCDEF : constant := 36; -- Old size name - synonym type NSA_ACC_OTHER_TYPE is -- other object-specific events record EVT_CREATION : BOOLEAN; -- object creation EVT_DEACCESS : BOOLEAN; -- object deaccess EVT_DELETION : BOOLEAN; -- object delete (devices) FILLER_1 : UNSIGNED_29; end record; for NSA_ACC_OTHER_TYPE use record EVT_CREATION at 0 range 0 .. 0; EVT_DEACCESS at 0 range 1 .. 1; EVT_DELETION at 0 range 2 .. 2; FILLER_1 at 0 range 3 .. 31; end record; for NSA_ACC_OTHER_TYPE'SIZE use 32; NSA_ACC_OTHER_TYPE_INIT : constant NSA_ACC_OTHER_TYPE := (EVT_CREATION => FALSE, EVT_DEACCESS => FALSE, EVT_DELETION => FALSE, FILLER_1 => 0); type NSAACC_TYPE is record ACC_FAILURE : UNSIGNED_LONGWORD; -- Access failures event mask ACC_SUCCESS : UNSIGNED_LONGWORD; -- Successful access event mask ACC_SYSPRV : UNSIGNED_LONGWORD; -- Success due to SYSPRV event mask ACC_BYPASS : UNSIGNED_LONGWORD; -- Success due to BYPASS event mask ACC_UPGRADE : UNSIGNED_LONGWORD; -- Success due to UPGRADE event mask ACC_DOWNGRADE : UNSIGNED_LONGWORD; -- Success due to DOWNGRADE event mask ACC_GRPPRV : UNSIGNED_LONGWORD; -- Success due to GRPPRV event mask ACC_READALL : UNSIGNED_LONGWORD; -- Success due to READALL event mask ACC_OTHER : NSA_ACC_OTHER_TYPE; -- other object-specific events end record; for NSAACC_TYPE use record ACC_FAILURE at 0 range 0 .. 31; ACC_SUCCESS at 4 range 0 .. 31; ACC_SYSPRV at 8 range 0 .. 31; ACC_BYPASS at 12 range 0 .. 31; ACC_UPGRADE at 16 range 0 .. 31; ACC_DOWNGRADE at 20 range 0 .. 31; ACC_GRPPRV at 24 range 0 .. 31; ACC_READALL at 28 range 0 .. 31; ACC_OTHER at 32 range 0 .. 31; end record; for NSAACC_TYPE'SIZE use 288; NSAACC_TYPE_INIT : constant NSAACC_TYPE := (ACC_FAILURE => 0, ACC_SUCCESS => 0, ACC_SYSPRV => 0, ACC_BYPASS => 0, ACC_UPGRADE => 0, ACC_DOWNGRADE => 0, ACC_GRPPRV => 0, ACC_READALL => 0, ACC_OTHER => NSA_ACC_OTHER_TYPE_INIT ); NSA_M_EVT_ACL : constant := 16#00000001#; NSA_M_EVT_MOUNT : constant := 16#00000002#; NSA_M_EVT_UAF : constant := 16#00000004#; NSA_M_EVT_INSTAL : constant := 16#00000008#; NSA_M_EVT_AUDIT : constant := 16#00000010#; NSA_M_EVT_CUSTOMER : constant := 16#00000020#; NSA_M_EVT_CSS : constant := 16#00000040#; NSA_M_EVT_LP : constant := 16#00000080#; NSA_M_EVT_SYSTIME : constant := 16#00000100#; NSA_M_EVT_SYSGEN : constant := 16#00000200#; NSA_M_EVT_IDENTIFIER : constant := 16#00000400#; NSA_M_EVT_CONNECTION : constant := 16#00000800#; NSA_M_EVT_NCP : constant := 16#00001000#; NSA_M_EVT_AUTHENTICATION : constant := 16#00002000#; NSA_K_NUM_SYS_EVENTS : constant := 14; -- number of system event types NSA_K_NUM_LOGIN_EVENTS : constant := 4; -- number of login event types NSA_K_NUM_PRIV_EVENTS : constant := 2; -- number of priv audit event types NSA_M_PRC_CREPRC : constant := 16#00000001#; NSA_M_PRC_DELPRC : constant := 16#00000002#; NSA_M_PRC_SCHDWK : constant := 16#00000004#; NSA_M_PRC_CANWAK : constant := 16#00000008#; NSA_M_PRC_WAKE : constant := 16#00000010#; NSA_M_PRC_SUSPND : constant := 16#00000020#; NSA_M_PRC_RESUME : constant := 16#00000040#; NSA_M_PRC_GRANTID : constant := 16#00000080#; NSA_M_PRC_REVOKID : constant := 16#00000100#; NSA_M_PRC_GETJPI : constant := 16#00000200#; NSA_M_PRC_FORCEX : constant := 16#00000400#; NSA_M_PRC_SIGPRC : constant := 16#00000800#; NSA_M_PRC_SETPRI : constant := 16#00001000#; NSA_M_PRC_PRCTERM : constant := 16#00002000#; NSA_M_PRC_CPU_CAPABILITIES : constant := 16#00004000#; NSA_M_PRC_PROCESS_CAPABILITIES : constant := 16#00008000#; NSA_M_PRC_PROCESS_AFFINITY : constant := 16#00010000#; NSA_M_PRC_SET_IMPLICIT_AFFINITY : constant := 16#00020000#; NSA_K_NUM_PROCESS_EVENTS : constant := 18; -- number of process control bits NSA_M_EVT_ILLFORMED : constant := 16#00000001#; NSA_K_NUM_AUDIT_EVENTS : constant := 1; -- number of audit event types NSA_M_PSB_CREATE : constant := 16#00000001#; NSA_M_PSB_DELETE : constant := 16#00000002#; NSA_M_PSB_MODIFY : constant := 16#00000004#; NSA_K_NUM_PERSONA_EVENTS : constant := 3; -- number of persona control bits NSA_C_EVT_LENGTH : constant := 40; -- size of alarm or audit event mask NSA_K_EVT_LENGTH : constant := 40; -- size of alarm or audit event mask NSA_S_NSAEVTDEF : constant := 40; -- Old size name - synonym type NSA_EVT_SYS_TYPE is -- miscellaneous system event mask record EVT_ACL : BOOLEAN; -- ACL requested alarms and audits EVT_MOUNT : BOOLEAN; -- MOUNT and DISMOUNT requests -- modifications made to the system EVT_UAF : BOOLEAN; -- or network authorization files EVT_INSTAL : BOOLEAN; -- INSTALL operations EVT_AUDIT : BOOLEAN; -- SET AUDIT operations (obsolete) EVT_CUSTOMER : BOOLEAN; -- Customer events EVT_CSS : BOOLEAN; -- CSS events EVT_LP : BOOLEAN; -- LP events EVT_SYSTIME : BOOLEAN; -- System time modification EVT_SYSGEN : BOOLEAN; -- SYSGEN parameter modification EVT_IDENTIFIER : BOOLEAN; -- Identifier auditing (as privilege) EVT_CONNECTION : BOOLEAN; -- Connection auditing EVT_NCP : BOOLEAN; -- NCP command line auditing EVT_AUTHENTICATION : BOOLEAN; -- DAS auditing FILLER_1 : UNSIGNED_18; end record; for NSA_EVT_SYS_TYPE use record EVT_ACL at 0 range 0 .. 0; EVT_MOUNT at 0 range 1 .. 1; EVT_UAF at 0 range 2 .. 2; EVT_INSTAL at 0 range 3 .. 3; EVT_AUDIT at 0 range 4 .. 4; EVT_CUSTOMER at 0 range 5 .. 5; EVT_CSS at 0 range 6 .. 6; EVT_LP at 0 range 7 .. 7; EVT_SYSTIME at 1 range 0 .. 0; EVT_SYSGEN at 1 range 1 .. 1; EVT_IDENTIFIER at 1 range 2 .. 2; EVT_CONNECTION at 1 range 3 .. 3; EVT_NCP at 1 range 4 .. 4; EVT_AUTHENTICATION at 1 range 5 .. 5; FILLER_1 at 1 range 6 .. 23; end record; for NSA_EVT_SYS_TYPE'SIZE use 32; NSA_EVT_SYS_TYPE_INIT : constant NSA_EVT_SYS_TYPE := (EVT_ACL => FALSE, EVT_MOUNT => FALSE, EVT_UAF => FALSE, EVT_INSTAL => FALSE, EVT_AUDIT => FALSE, EVT_CUSTOMER => FALSE, EVT_CSS => FALSE, EVT_LP => FALSE, EVT_SYSTIME => FALSE, EVT_SYSGEN => FALSE, EVT_IDENTIFIER => FALSE, EVT_CONNECTION => FALSE, EVT_NCP => FALSE, EVT_AUTHENTICATION => FALSE, FILLER_1 => 0); type NSA_PRIVILEGE_MASKS_TYPE is record PRVAUD_SUCCESS : UNSIGNED_QUADWORD; -- successfull privilege audit mask PRVAUD_FAILURE : UNSIGNED_QUADWORD; -- successfull privilege audit mask end record; for NSA_PRIVILEGE_MASKS_TYPE use record PRVAUD_SUCCESS at 0 range 0 .. 63; PRVAUD_FAILURE at 8 range 0 .. 63; end record; for NSA_PRIVILEGE_MASKS_TYPE'SIZE use 128; NSA_PRIVILEGE_MASKS_TYPE_INIT : constant NSA_PRIVILEGE_MASKS_TYPE := (PRVAUD_SUCCESS => (0, 0), PRVAUD_FAILURE => (0, 0)); type NSA_EVT_PROCESS_TYPE is -- process control auditing record PRC_CREPRC : BOOLEAN; -- Create process PRC_DELPRC : BOOLEAN; -- Delete process PRC_SCHDWK : BOOLEAN; -- Schedule process wakeup PRC_CANWAK : BOOLEAN; -- Cancel process wakeup PRC_WAKE : BOOLEAN; -- Wake process PRC_SUSPND : BOOLEAN; -- Suspend process PRC_RESUME : BOOLEAN; -- Resume process PRC_GRANTID : BOOLEAN; -- Grant identifier PRC_REVOKID : BOOLEAN; -- Revoke identifier PRC_GETJPI : BOOLEAN; -- Get job or process information PRC_FORCEX : BOOLEAN; -- Force image exit PRC_SIGPRC : BOOLEAN; -- Signal process (undocumented) PRC_SETPRI : BOOLEAN; -- Set process priority PRC_PRCTERM : BOOLEAN; -- Detect process termination (undocumented) PRC_CPU_CAPABILITIES : BOOLEAN; -- Change in CPU capability PRC_PROCESS_CAPABILITIES : BOOLEAN; -- Change in process capability PRC_PROCESS_AFFINITY : BOOLEAN; -- Change in process affinity PRC_SET_IMPLICIT_AFFINITY : BOOLEAN; -- Change in implicit affinity FILLER_1 : UNSIGNED_14; end record; for NSA_EVT_PROCESS_TYPE use record PRC_CREPRC at 0 range 0 .. 0; PRC_DELPRC at 0 range 1 .. 1; PRC_SCHDWK at 0 range 2 .. 2; PRC_CANWAK at 0 range 3 .. 3; PRC_WAKE at 0 range 4 .. 4; PRC_SUSPND at 0 range 5 .. 5; PRC_RESUME at 0 range 6 .. 6; PRC_GRANTID at 0 range 7 .. 7; PRC_REVOKID at 1 range 0 .. 0; PRC_GETJPI at 1 range 1 .. 1; PRC_FORCEX at 1 range 2 .. 2; PRC_SIGPRC at 1 range 3 .. 3; PRC_SETPRI at 1 range 4 .. 4; PRC_PRCTERM at 1 range 5 .. 5; PRC_CPU_CAPABILITIES at 1 range 6 .. 6; PRC_PROCESS_CAPABILITIES at 1 range 7 .. 7; PRC_PROCESS_AFFINITY at 2 range 0 .. 0; PRC_SET_IMPLICIT_AFFINITY at 2 range 1 .. 1; FILLER_1 at 2 range 2 .. 15; end record; for NSA_EVT_PROCESS_TYPE'SIZE use 32; NSA_EVT_PROCESS_TYPE_INIT : constant NSA_EVT_PROCESS_TYPE := (PRC_CREPRC => FALSE, PRC_DELPRC => FALSE, PRC_SCHDWK => FALSE, PRC_CANWAK => FALSE, PRC_WAKE => FALSE, PRC_SUSPND => FALSE, PRC_RESUME => FALSE, PRC_GRANTID => FALSE, PRC_REVOKID => FALSE, PRC_GETJPI => FALSE, PRC_FORCEX => FALSE, PRC_SIGPRC => FALSE, PRC_SETPRI => FALSE, PRC_PRCTERM => FALSE, PRC_CPU_CAPABILITIES => FALSE, PRC_PROCESS_CAPABILITIES => FALSE, PRC_PROCESS_AFFINITY => FALSE, PRC_SET_IMPLICIT_AFFINITY => FALSE, FILLER_1 => 0); type NSA_EVT_AUDIT_TYPE is -- miscellaneous audit event mask record EVT_ILLFORMED : BOOLEAN; -- Ill-formed TCB audit FILLER_1 : UNSIGNED_31; end record; for NSA_EVT_AUDIT_TYPE use record EVT_ILLFORMED at 0 range 0 .. 0; FILLER_1 at 0 range 1 .. 31; end record; for NSA_EVT_AUDIT_TYPE'SIZE use 32; NSA_EVT_AUDIT_TYPE_INIT : constant NSA_EVT_AUDIT_TYPE := (EVT_ILLFORMED => FALSE, FILLER_1 => 0); type NSA_EVT_PERSONA_TYPE is -- persona auditing record PSB_CREATE : BOOLEAN; -- Create persona PSB_DELETE : BOOLEAN; -- Delete persona PSB_MODIFY : BOOLEAN; -- Modify persona FILLER_1 : UNSIGNED_29; end record; for NSA_EVT_PERSONA_TYPE use record PSB_CREATE at 0 range 0 .. 0; PSB_DELETE at 0 range 1 .. 1; PSB_MODIFY at 0 range 2 .. 2; FILLER_1 at 0 range 3 .. 31; end record; for NSA_EVT_PERSONA_TYPE'SIZE use 32; NSA_EVT_PERSONA_TYPE_INIT : constant NSA_EVT_PERSONA_TYPE := (PSB_CREATE => FALSE, PSB_DELETE => FALSE, PSB_MODIFY => FALSE, FILLER_1 => 0); type NSAEVT_TYPE is record EVT_SYS : NSA_EVT_SYS_TYPE; -- miscellaneous system event mask EVT_LOGB : UNSIGNED_BYTE; -- breakin detection event mask EVT_LOGI : UNSIGNED_BYTE; -- login event mask EVT_LOGF : UNSIGNED_BYTE; -- login failure event mask EVT_LOGO : UNSIGNED_BYTE; -- logout event mask PRIVILEGE_MASKS : NSA_PRIVILEGE_MASKS_TYPE; EVT_PROCESS : NSA_EVT_PROCESS_TYPE; -- process control auditing EVT_AUDIT : NSA_EVT_AUDIT_TYPE; -- miscellaneous audit event mask EVT_PERSONA : NSA_EVT_PERSONA_TYPE; -- persona auditing FILLER_1 : UNSIGNED_LONGWORD; -- spare longword end record; for NSAEVT_TYPE use record EVT_SYS at 0 range 0 .. 31; EVT_LOGB at 4 range 0 .. 7; EVT_LOGI at 5 range 0 .. 7; EVT_LOGF at 6 range 0 .. 7; EVT_LOGO at 7 range 0 .. 7; PRIVILEGE_MASKS at 8 range 0 .. 127; EVT_PROCESS at 24 range 0 .. 31; EVT_AUDIT at 28 range 0 .. 31; EVT_PERSONA at 32 range 0 .. 31; FILLER_1 at 36 range 0 .. 31; end record; for NSAEVT_TYPE'SIZE use 320; NSAEVT_TYPE_INIT : constant NSAEVT_TYPE := ( EVT_SYS => NSA_EVT_SYS_TYPE_INIT, EVT_LOGB => 0, EVT_LOGI => 0, EVT_LOGF => 0, EVT_LOGO => 0, PRIVILEGE_MASKS => NSA_PRIVILEGE_MASKS_TYPE_INIT, EVT_PROCESS => NSA_EVT_PROCESS_TYPE_INIT, EVT_AUDIT => NSA_EVT_AUDIT_TYPE_INIT, EVT_PERSONA => NSA_EVT_PERSONA_TYPE_INIT, FILLER_1 => 0); NSA_M_EVT_LOG_BAT : constant := 16#00000001#; NSA_M_EVT_LOG_DIA : constant := 16#00000002#; NSA_M_EVT_LOG_LOC : constant := 16#00000004#; NSA_M_EVT_LOG_REM : constant := 16#00000008#; NSA_M_EVT_LOG_NET : constant := 16#00000010#; NSA_M_EVT_LOG_SUB : constant := 16#00000020#; NSA_M_EVT_LOG_DET : constant := 16#00000040#; NSA_M_EVT_LOG_SRV : constant := 16#00000080#; NSA_K_NUM_JOB_TYPES : constant := 8; -- number of job types type NSAEVTLOGBITS_TYPE is record EVT_LOG_BAT : BOOLEAN; -- batch EVT_LOG_DIA : BOOLEAN; -- dialup EVT_LOG_LOC : BOOLEAN; -- local EVT_LOG_REM : BOOLEAN; -- remote EVT_LOG_NET : BOOLEAN; -- network EVT_LOG_SUB : BOOLEAN; -- subprocess EVT_LOG_DET : BOOLEAN; -- detached process EVT_LOG_SRV : BOOLEAN; -- server thread end record; for NSAEVTLOGBITS_TYPE use record EVT_LOG_BAT at 0 range 0 .. 0; EVT_LOG_DIA at 0 range 1 .. 1; EVT_LOG_LOC at 0 range 2 .. 2; EVT_LOG_REM at 0 range 3 .. 3; EVT_LOG_NET at 0 range 4 .. 4; EVT_LOG_SUB at 0 range 5 .. 5; EVT_LOG_DET at 0 range 6 .. 6; EVT_LOG_SRV at 0 range 7 .. 7; end record; for NSAEVTLOGBITS_TYPE'SIZE use 8; NSAEVTLOGBITS_TYPE_INIT : constant NSAEVTLOGBITS_TYPE := (EVT_LOG_BAT => FALSE, EVT_LOG_DIA => FALSE, EVT_LOG_LOC => FALSE, EVT_LOG_REM => FALSE, EVT_LOG_NET => FALSE, EVT_LOG_SUB => FALSE, EVT_LOG_DET => FALSE, EVT_LOG_SRV => FALSE); NSA_C_OLD_EVT_LENGTH : constant := 40; NSA_K_OLD_EVT_LENGTH : constant := 40; NSA_S_NSAOLDEVTDEF : constant := 40; -- Old size name - synonym type NSAOLDEVT_TYPE is record FILLER_1 : UNSIGNED_LONGWORD; -- System bits are still the same FILLER_2 : UNSIGNED_LONGWORD; -- Breakin/Login/Logout bytes -- **************************************************************************** -- The following file access masks must be contiguous and in the current order -- **************************************************************************** OLD_EVT_FAILURE : UNSIGNED_LONGWORD; -- Access failures event mask OLD_EVT_SUCCESS : UNSIGNED_LONGWORD; -- Successful access event mask OLD_EVT_SYSPRV : UNSIGNED_LONGWORD; -- Success due to SYSPRV event mask OLD_EVT_BYPASS : UNSIGNED_LONGWORD; -- Success due to BYPASS event mask OLD_EVT_UPGRADE : UNSIGNED_LONGWORD; -- Success due to UPGRADE event mask OLD_EVT_DOWNGRADE : UNSIGNED_LONGWORD; -- Success due to DOWNGRADE event mask OLD_EVT_GRPPRV : UNSIGNED_LONGWORD; -- Success due to GRPPRV event mask OLD_EVT_READALL : UNSIGNED_LONGWORD; -- Success due to READALL event mask -- **************************************************************************** -- End of file access masks -- **************************************************************************** end record; for NSAOLDEVT_TYPE use record FILLER_1 at 0 range 0 .. 31; FILLER_2 at 4 range 0 .. 31; OLD_EVT_FAILURE at 8 range 0 .. 31; OLD_EVT_SUCCESS at 12 range 0 .. 31; OLD_EVT_SYSPRV at 16 range 0 .. 31; OLD_EVT_BYPASS at 20 range 0 .. 31; OLD_EVT_UPGRADE at 24 range 0 .. 31; OLD_EVT_DOWNGRADE at 28 range 0 .. 31; OLD_EVT_GRPPRV at 32 range 0 .. 31; OLD_EVT_READALL at 36 range 0 .. 31; end record; for NSAOLDEVT_TYPE'SIZE use 320; NSAOLDEVT_TYPE_INIT : constant NSAOLDEVT_TYPE := (FILLER_1 => 0, FILLER_2 => 0, OLD_EVT_FAILURE => 0, OLD_EVT_SUCCESS => 0, OLD_EVT_SYSPRV => 0, OLD_EVT_BYPASS => 0, OLD_EVT_UPGRADE => 0, OLD_EVT_DOWNGRADE => 0, OLD_EVT_GRPPRV => 0, OLD_EVT_READALL => 0); NSA_S_ALARM_NAME : constant := 32; -- maximum length of an alarm name NSA_S_AUDIT_NAME : constant := 65; -- maximum length of an audit name NSA_S_IMAGE_NAME : constant := 1022; -- maximum size of an image name (XQP) NSA_S_JOURNAL_NAME : constant := 65; -- maximum length of alarm or audit name NSA_K_MAX_JOURNALS : constant := 1; -- maximum number of alarm or audit journals NSA_S_MSGFILNAM : constant := 32; -- maximum size of message file name NSA_K_SCRATCH_PAGES : constant := 10; -- number of scratch P1 pages (NSA$A_SCRATCH) NSA_K_SCRATCH_LENGTH : constant := 5120; -- byte length of P1 scratch space NSA_S_NSACONDEF : constant := 4; -- Old size name - synonym type NSACON_TYPE is record FILLER_1 : UNSIGNED_LONGWORD; -- dummy structure to pick up NSA$ prefix end record; for NSACON_TYPE use record FILLER_1 at 0 range 0 .. 31; end record; for NSACON_TYPE'SIZE use 32; NSACON_TYPE_INIT : constant NSACON_TYPE := (FILLER_1 => 0); type NSA_SYSUAF_FIELDS_TYPE is -- SYSUAF flags: record SYSUAF_ACCESS : BOOLEAN; -- ACCESS modified (obsolete) SYSUAF_ACCOUNT : BOOLEAN; -- ACCOUNT modified SYSUAF_ASTLM : BOOLEAN; -- ASTLM modified SYSUAF_BATCH : BOOLEAN; -- BATCH modified SYSUAF_BIOLM : BOOLEAN; -- BIOLM modified SYSUAF_BYTLM : BOOLEAN; -- BYTLM modified SYSUAF_CLI : BOOLEAN; -- CLI modified SYSUAF_CLITABLES : BOOLEAN; -- CLITABLES modified SYSUAF_CPUTIME : BOOLEAN; -- CPUTIME modified SYSUAF_DEFPRIVILEGES : BOOLEAN; -- DEFPRIVILEGES modified SYSUAF_DEVICE : BOOLEAN; -- DEVICE modified SYSUAF_DIALUP : BOOLEAN; -- DIALUP modified SYSUAF_DIOLM : BOOLEAN; -- DIOLM modified SYSUAF_DIRECTORY : BOOLEAN; -- DIRECTORY modified SYSUAF_ENQLM : BOOLEAN; -- ENQLM modified SYSUAF_EXPIRATION : BOOLEAN; -- EXPIRATION modified SYSUAF_FILLM : BOOLEAN; -- FILLM modified SYSUAF_FLAGS : BOOLEAN; -- FLAGS modified SYSUAF_INTERACTIVE : BOOLEAN; -- INTERACTIVE modified (obsolete) SYSUAF_JTQUOTA : BOOLEAN; -- JTQUOTA modified SYSUAF_LGICMD : BOOLEAN; -- LGICMD modified SYSUAF_LOCAL : BOOLEAN; -- LOCAL modified SYSUAF_MAXDETACH : BOOLEAN; -- MAXDETACH modified SYSUAF_MAXJOBS : BOOLEAN; -- MAXJOBS modified SYSUAF_MAXACCTJOBS : BOOLEAN; -- MAXACCTJOBS modified SYSUAF_NETWORK : BOOLEAN; -- NETWORK modified SYSUAF_OWNER : BOOLEAN; -- OWNER modified SYSUAF_PASSWORD : BOOLEAN; -- PASSWORD modified SYSUAF_PBYTLM : BOOLEAN; -- PBYTLM modified SYSUAF_PFLAGS : BOOLEAN; -- PFLAGS modified (obsolete) SYSUAF_P_RESTRICT : BOOLEAN; -- P_RESTRICT modified (obsolete) SYSUAF_PGFLQUOTA : BOOLEAN; -- PGFLQUOTA modified SYSUAF_PRCLM : BOOLEAN; -- PRCLM modified SYSUAF_PRIMEDAYS : BOOLEAN; -- PRIMEDAYS modified SYSUAF_PRIORITY : BOOLEAN; -- PRIORITY modified SYSUAF_PRIVILEGES : BOOLEAN; -- PRIVILEGES modified SYSUAF_PWDLIFETIME : BOOLEAN; -- PWDLIFETIME modified SYSUAF_PWDMINIMUM : BOOLEAN; -- PWDMINIMUM modified SYSUAF_QUEPRIORITY : BOOLEAN; -- QUEPRIORITY modified SYSUAF_REMOTE : BOOLEAN; -- REMOTE modified SYSUAF_SFLAGS : BOOLEAN; -- SFLAGS modified (obsolete) SYSUAF_S_RESTRICT : BOOLEAN; -- S_RESTRICT modified (obsolete) SYSUAF_SHRFILLM : BOOLEAN; -- SHRFILLM modified SYSUAF_TQELM : BOOLEAN; -- TQELM modified SYSUAF_UIC : BOOLEAN; -- UIC modified SYSUAF_WSDEFAULT : BOOLEAN; -- WSDEFAULT modified SYSUAF_WSEXTENT : BOOLEAN; -- WSEXTENT modified SYSUAF_WSQUOTA : BOOLEAN; -- WSQUOTA modified SYSUAF_ENCRYPT : BOOLEAN; -- PRIMARY password hash algorithm modified SYSUAF_ENCRYPT2 : BOOLEAN; -- SECONDARY password hash algorithm modified SYSUAF_SALT : BOOLEAN; -- SALT modified SYSUAF_PASSWORD2 : BOOLEAN; -- Secondary PASSWORD modified SYSUAF_PWD_DATE : BOOLEAN; -- Password expiration date SYSUAF_PWD2_DATE : BOOLEAN; -- Secondary password expiration date SYSUAF_LOGFAILS : BOOLEAN; -- LOGFAILS modified SYSUAF_LASTLOGIN_I : BOOLEAN; -- LASTLOGIN_I modified SYSUAF_LASTLOGIN_N : BOOLEAN; -- LASTLOGIN_N modified SYSUAF_MIN_CLASS : BOOLEAN; -- MIN_CLASS modified SYSUAF_MAX_CLASS : BOOLEAN; -- MAX_CLASS modified SYSUAF_USER_DATA : BOOLEAN; -- user data area modified SYSUAF_DEF_CLASS : BOOLEAN; -- DEF_CLASS modified FILLER_1 : UNSIGNED_3; end record; for NSA_SYSUAF_FIELDS_TYPE use record SYSUAF_ACCESS at 0 range 0 .. 0; SYSUAF_ACCOUNT at 0 range 1 .. 1; SYSUAF_ASTLM at 0 range 2 .. 2; SYSUAF_BATCH at 0 range 3 .. 3; SYSUAF_BIOLM at 0 range 4 .. 4; SYSUAF_BYTLM at 0 range 5 .. 5; SYSUAF_CLI at 0 range 6 .. 6; SYSUAF_CLITABLES at 0 range 7 .. 7; SYSUAF_CPUTIME at 1 range 0 .. 0; SYSUAF_DEFPRIVILEGES at 1 range 1 .. 1; SYSUAF_DEVICE at 1 range 2 .. 2; SYSUAF_DIALUP at 1 range 3 .. 3; SYSUAF_DIOLM at 1 range 4 .. 4; SYSUAF_DIRECTORY at 1 range 5 .. 5; SYSUAF_ENQLM at 1 range 6 .. 6; SYSUAF_EXPIRATION at 1 range 7 .. 7; SYSUAF_FILLM at 2 range 0 .. 0; SYSUAF_FLAGS at 2 range 1 .. 1; SYSUAF_INTERACTIVE at 2 range 2 .. 2; SYSUAF_JTQUOTA at 2 range 3 .. 3; SYSUAF_LGICMD at 2 range 4 .. 4; SYSUAF_LOCAL at 2 range 5 .. 5; SYSUAF_MAXDETACH at 2 range 6 .. 6; SYSUAF_MAXJOBS at 2 range 7 .. 7; SYSUAF_MAXACCTJOBS at 3 range 0 .. 0; SYSUAF_NETWORK at 3 range 1 .. 1; SYSUAF_OWNER at 3 range 2 .. 2; SYSUAF_PASSWORD at 3 range 3 .. 3; SYSUAF_PBYTLM at 3 range 4 .. 4; SYSUAF_PFLAGS at 3 range 5 .. 5; SYSUAF_P_RESTRICT at 3 range 6 .. 6; SYSUAF_PGFLQUOTA at 3 range 7 .. 7; SYSUAF_PRCLM at 4 range 0 .. 0; SYSUAF_PRIMEDAYS at 4 range 1 .. 1; SYSUAF_PRIORITY at 4 range 2 .. 2; SYSUAF_PRIVILEGES at 4 range 3 .. 3; SYSUAF_PWDLIFETIME at 4 range 4 .. 4; SYSUAF_PWDMINIMUM at 4 range 5 .. 5; SYSUAF_QUEPRIORITY at 4 range 6 .. 6; SYSUAF_REMOTE at 4 range 7 .. 7; SYSUAF_SFLAGS at 5 range 0 .. 0; SYSUAF_S_RESTRICT at 5 range 1 .. 1; SYSUAF_SHRFILLM at 5 range 2 .. 2; SYSUAF_TQELM at 5 range 3 .. 3; SYSUAF_UIC at 5 range 4 .. 4; SYSUAF_WSDEFAULT at 5 range 5 .. 5; SYSUAF_WSEXTENT at 5 range 6 .. 6; SYSUAF_WSQUOTA at 5 range 7 .. 7; SYSUAF_ENCRYPT at 6 range 0 .. 0; SYSUAF_ENCRYPT2 at 6 range 1 .. 1; SYSUAF_SALT at 6 range 2 .. 2; SYSUAF_PASSWORD2 at 6 range 3 .. 3; SYSUAF_PWD_DATE at 6 range 4 .. 4; SYSUAF_PWD2_DATE at 6 range 5 .. 5; SYSUAF_LOGFAILS at 6 range 6 .. 6; SYSUAF_LASTLOGIN_I at 6 range 7 .. 7; SYSUAF_LASTLOGIN_N at 7 range 0 .. 0; SYSUAF_MIN_CLASS at 7 range 1 .. 1; SYSUAF_MAX_CLASS at 7 range 2 .. 2; SYSUAF_USER_DATA at 7 range 3 .. 3; SYSUAF_DEF_CLASS at 7 range 4 .. 4; FILLER_1 at 7 range 5 .. 7; end record; for NSA_SYSUAF_FIELDS_TYPE'SIZE use 64; NSA_SYSUAF_FIELDS_TYPE_INIT : constant NSA_SYSUAF_FIELDS_TYPE := (SYSUAF_ACCESS => FALSE, SYSUAF_ACCOUNT => FALSE, SYSUAF_ASTLM => FALSE, SYSUAF_BATCH => FALSE, SYSUAF_BIOLM => FALSE, SYSUAF_BYTLM => FALSE, SYSUAF_CLI => FALSE, SYSUAF_CLITABLES => FALSE, SYSUAF_CPUTIME => FALSE, SYSUAF_DEFPRIVILEGES => FALSE, SYSUAF_DEVICE => FALSE, SYSUAF_DIALUP => FALSE, SYSUAF_DIOLM => FALSE, SYSUAF_DIRECTORY => FALSE, SYSUAF_ENQLM => FALSE, SYSUAF_EXPIRATION => FALSE, SYSUAF_FILLM => FALSE, SYSUAF_FLAGS => FALSE, SYSUAF_INTERACTIVE => FALSE, SYSUAF_JTQUOTA => FALSE, SYSUAF_LGICMD => FALSE, SYSUAF_LOCAL => FALSE, SYSUAF_MAXDETACH => FALSE, SYSUAF_MAXJOBS => FALSE, SYSUAF_MAXACCTJOBS => FALSE, SYSUAF_NETWORK => FALSE, SYSUAF_OWNER => FALSE, SYSUAF_PASSWORD => FALSE, SYSUAF_PBYTLM => FALSE, SYSUAF_PFLAGS => FALSE, SYSUAF_P_RESTRICT => FALSE, SYSUAF_PGFLQUOTA => FALSE, SYSUAF_PRCLM => FALSE, SYSUAF_PRIMEDAYS => FALSE, SYSUAF_PRIORITY => FALSE, SYSUAF_PRIVILEGES => FALSE, SYSUAF_PWDLIFETIME => FALSE, SYSUAF_PWDMINIMUM => FALSE, SYSUAF_QUEPRIORITY => FALSE, SYSUAF_REMOTE => FALSE, SYSUAF_SFLAGS => FALSE, SYSUAF_S_RESTRICT => FALSE, SYSUAF_SHRFILLM => FALSE, SYSUAF_TQELM => FALSE, SYSUAF_UIC => FALSE, SYSUAF_WSDEFAULT => FALSE, SYSUAF_WSEXTENT => FALSE, SYSUAF_WSQUOTA => FALSE, SYSUAF_ENCRYPT => FALSE, SYSUAF_ENCRYPT2 => FALSE, SYSUAF_SALT => FALSE, SYSUAF_PASSWORD2 => FALSE, SYSUAF_PWD_DATE => FALSE, SYSUAF_PWD2_DATE => FALSE, SYSUAF_LOGFAILS => FALSE, SYSUAF_LASTLOGIN_I => FALSE, SYSUAF_LASTLOGIN_N => FALSE, SYSUAF_MIN_CLASS => FALSE, SYSUAF_MAX_CLASS => FALSE, SYSUAF_USER_DATA => FALSE, SYSUAF_DEF_CLASS => FALSE, FILLER_1 => 0); type NSA_SYSUAF_FIELDS_TYPE is record SYSUAF_FIELDS : NSA_SYSUAF_FIELDS_TYPE; -- SYSUAF flags: end record; for NSA_SYSUAF_FIELDS_TYPE use record SYSUAF_FIELDS at 0 range 0 .. 63; end record; for NSA_SYSUAF_FIELDS_TYPE'SIZE use 64; NSA_SYSUAF_FIELDS_TYPE_INIT : constant NSA_SYSUAF_FIELDS_TYPE := ( SYSUAF_FIELDS => NSA_SYSUAF_FIELDS_TYPE_INIT ); type NSA_FIELD_TBL_ENTRY_TYPE is record FLD_NAME : UNSIGNED_LONGWORD; -- Address of ascid field name FLD_OFFSET : UNSIGNED_WORD; -- Offset into record FLD_SIZE : UNSIGNED_WORD; -- Size of field FLD_FMT_RTN : ADDRESS; -- Format routine FLD_FMT_P1 : UNSIGNED_LONGWORD; -- Parameter to format rtn end record; for NSA_FIELD_TBL_ENTRY_TYPE use record FLD_NAME at 0 range 0 .. 31; FLD_OFFSET at 4 range 0 .. 15; FLD_SIZE at 6 range 0 .. 15; FLD_FMT_RTN at 8 range 0 .. 31; FLD_FMT_P1 at 12 range 0 .. 31; end record; for NSA_FIELD_TBL_ENTRY_TYPE'SIZE use 128; NSA_FIELD_TBL_ENTRY_TYPE_INIT : constant NSA_FIELD_TBL_ENTRY_TYPE := (FLD_NAME => 0, FLD_OFFSET => 0, FLD_SIZE => 0, FLD_FMT_RTN => ADDRESS_ZERO, FLD_FMT_P1 => 0); NSA_M_SUM_FILE : constant := 16#00000001#; NSA_M_SUM_PRIV : constant := 16#00000002#; NSA_M_SUM_DEJAVU : constant := 16#80000000#; type NSASUMMARYBITS_TYPE is record SUM_FILE : BOOLEAN; -- file access auditing enabled SUM_PRIV : BOOLEAN; -- privilege auditing enabled FILLER_1 : UNSIGNED_29; SUM_DEJAVU : BOOLEAN; -- auditing running in past end record; for NSASUMMARYBITS_TYPE use record SUM_FILE at 0 range 0 .. 0; SUM_PRIV at 0 range 1 .. 1; FILLER_1 at 0 range 2 .. 30; SUM_DEJAVU at 3 range 7 .. 7; end record; for NSASUMMARYBITS_TYPE'SIZE use 32; NSASUMMARYBITS_TYPE_INIT : constant NSASUMMARYBITS_TYPE := (SUM_FILE => FALSE, SUM_PRIV => FALSE, FILLER_1 => 0, SUM_DEJAVU => FALSE); end NSAEVTDEF;