diff options
Diffstat (limited to '')
-rw-r--r-- | private/ntos/seaudit/msobjs/audit.rc | 14 | ||||
-rw-r--r-- | private/ntos/seaudit/msobjs/makefile | 6 | ||||
-rw-r--r-- | private/ntos/seaudit/msobjs/makefile.inc | 4 | ||||
-rw-r--r-- | private/ntos/seaudit/msobjs/msobjs.def | 3 | ||||
-rw-r--r-- | private/ntos/seaudit/msobjs/msobjs.mc | 1908 | ||||
-rw-r--r-- | private/ntos/seaudit/msobjs/sources | 41 |
6 files changed, 1976 insertions, 0 deletions
diff --git a/private/ntos/seaudit/msobjs/audit.rc b/private/ntos/seaudit/msobjs/audit.rc new file mode 100644 index 000000000..54937ffee --- /dev/null +++ b/private/ntos/seaudit/msobjs/audit.rc @@ -0,0 +1,14 @@ +#include <windows.h> + +1 11 MSG00001.bin + +#include <ntverp.h> + +#define VER_FILETYPE VFT_DLL +#define VER_FILESUBTYPE VFT2_UNKNOWN +#define VER_FILEDESCRIPTION_STR "System object audit names" +#define VER_INTERNALNAME_STR "msobjs.dll" +#define VER_ORIGINALFILENAME_STR "msobjs.dll" + +#include "common.ver" + diff --git a/private/ntos/seaudit/msobjs/makefile b/private/ntos/seaudit/msobjs/makefile new file mode 100644 index 000000000..6ee4f43fa --- /dev/null +++ b/private/ntos/seaudit/msobjs/makefile @@ -0,0 +1,6 @@ +# +# DO NOT EDIT THIS FILE!!! Edit .\sources. if you want to add a new source +# file to this component. This file merely indirects to the real make file +# that is shared by all the components of NT OS/2 +# +!INCLUDE $(NTMAKEENV)\makefile.def diff --git a/private/ntos/seaudit/msobjs/makefile.inc b/private/ntos/seaudit/msobjs/makefile.inc new file mode 100644 index 000000000..aec6a9639 --- /dev/null +++ b/private/ntos/seaudit/msobjs/makefile.inc @@ -0,0 +1,4 @@ +$(NTTARGETFILE0): msobjs.rc msg00001.bin + +msobjs.rc msg00001.bin: msobjs.mc + mc -v -r . -h $(_NTROOT)\public\sdk\inc\ msobjs.mc diff --git a/private/ntos/seaudit/msobjs/msobjs.def b/private/ntos/seaudit/msobjs/msobjs.def new file mode 100644 index 000000000..2bdaca27c --- /dev/null +++ b/private/ntos/seaudit/msobjs/msobjs.def @@ -0,0 +1,3 @@ +LIBRARY msaudit + +DESCRIPTION 'Object access names for auditing' diff --git a/private/ntos/seaudit/msobjs/msobjs.mc b/private/ntos/seaudit/msobjs/msobjs.mc new file mode 100644 index 000000000..5ca7116e5 --- /dev/null +++ b/private/ntos/seaudit/msobjs/msobjs.mc @@ -0,0 +1,1908 @@ +;/*++ BUILD Version: 0001 // Increment this if a change has global effects +; +;Copyright (c) 1991 Microsoft Corporation +; +;Module Name: +; +; msobjs.mc +; +;Abstract: +; +; Constant definitions for the NT system-defined object access +; types as we want them displayed in the event viewer for Auditing. +; +; +; +; ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! +; ! ! +; ! Note that this is a PARAMETER MESSAGE FILE from the event viewer's ! +; ! perspective, and so no messages with an ID lower than 0x1000 should ! +; ! be defined here. ! +; ! ! +; ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! +; +; +; Please add new object-specific types at the end of this file... +; +; +;Author: +; +; Jim Kelly (JimK) 14-Oct-1992 +; +;Revision History: +; +;Notes: +; +; The .h and .res forms of this file are generated from the .mc +; form of the file (private\ntos\seaudit\msobjs\msobjs.mc). Please make +; all changes to the .mc form of the file. +; +; +; +;--*/ +; +;#ifndef _MSOBJS_ +;#define _MSOBJS_ +; +;/*lint -e767 */ // Don't complain about different definitions // winnt + + +MessageIdTypedef=ULONG + +SeverityNames=(None=0x0) + +FacilityNames=(None=0x0) + + + +MessageId=0x600 + Language=English +Unused message ID +. +;// Message ID 600 is unused - just used to flush out the diagram + + +; +;////////////////////////////////////////////////////////////////////////////// +;////////////////////////////////////////////////////////////////////////////// +;////////////////////////////////////////////////////////////////////////////// +;////////////////////////////////////////////////////////////////////////////// +;////////////////////////////////////////////////////////////////////////////// +;////////////////////////////////////////////////////////////////////////////// +;////////////////////////////////////////////////////////////////////////////// +;////////////////////////////////////////////////////////////////////////////// +;////////////////////////////////////////////////////////////////////////////// +;////////////////////////////////////////////////////////////////////////////// +;// // +;// // +;// WELL KNOWN ACCESS TYPE NAMES // +;// // +;// Must be below 0x1000 // +;// // +;// // +;////////////////////////////////////////////////////////////////////////////// +;////////////////////////////////////////////////////////////////////////////// +;////////////////////////////////////////////////////////////////////////////// +;////////////////////////////////////////////////////////////////////////////// +;////////////////////////////////////////////////////////////////////////////// +;////////////////////////////////////////////////////////////////////////////// +;////////////////////////////////////////////////////////////////////////////// +;////////////////////////////////////////////////////////////////////////////// +;////////////////////////////////////////////////////////////////////////////// +;////////////////////////////////////////////////////////////////////////////// + +;//////////////////////////////////////////////// +;// +;// Access Type = DELETE +;// + +MessageId=0x0601 + SymbolicName=SE_ACCESS_NAME_DELETE + Language=English +DELETE +. + + +;//////////////////////////////////////////////// +;// +;// Access Type = READ_CONTROL +;// + +MessageId=0x0602 + SymbolicName=SE_ACCESS_NAME_READ_CONTROL + Language=English +READ_CONTROL +. + + +;//////////////////////////////////////////////// +;// +;// Access Type = WRITE_DAC +;// + +MessageId=0x0603 + SymbolicName=SE_ACCESS_NAME_WRITE_DAC + Language=English +WRITE_DAC +. + + +;//////////////////////////////////////////////// +;// +;// Access Type = WRITE_OWNER +;// + +MessageId=0x0604 + SymbolicName=SE_ACCESS_NAME_WRITE_OWNER + Language=English +WRITE_OWNER +. + + +;//////////////////////////////////////////////// +;// +;// Access Type = SYNCHRONIZE +;// + +MessageId=0x0605 + SymbolicName=SE_ACCESS_NAME_SYNCHRONIZE + Language=English +SYNCHRONIZE +. + + +;//////////////////////////////////////////////// +;// +;// Access Type = ACCESS_SYSTEM_SECURITY +;// + +MessageId=0x0606 + SymbolicName=SE_ACCESS_NAME_ACCESS_SYS_SEC + Language=English +ACCESS_SYS_SEC +. + +;//////////////////////////////////////////////// +;// +;// Access Type = MAXIMUM_ALLOWED +;// + +MessageId=0x0607 + SymbolicName=SE_ACCESS_NAME_MAXIMUM_ALLOWED + Language=English +MAX_ALLOWED +. + + + +; +;////////////////////////////////////////////////////////////////////////////// +;// // +;// // +;// Names to use when specific access // +;// names can not be located // +;// // +;// Must be below 0x1000 // +;// // +;// // +;////////////////////////////////////////////////////////////////////////////// + +;//////////////////////////////////////////////// +;// +;// Access Type = Specific access, bits 0 - 15 +;// + +MessageId=0x0610 + SymbolicName=SE_ACCESS_NAME_SPECIFIC_0 + Language=English +Unknown specific access (bit 0) +. + + +MessageId=0x0611 + SymbolicName=SE_ACCESS_NAME_SPECIFIC_1 + Language=English +Unknown specific access (bit 1) +. + + +MessageId=0x0612 + SymbolicName=SE_ACCESS_NAME_SPECIFIC_2 + Language=English +Unknown specific access (bit 2) +. + + +MessageId=0x0613 + SymbolicName=SE_ACCESS_NAME_SPECIFIC_3 + Language=English +Unknown specific access (bit 3) +. + + +MessageId=0x0614 + SymbolicName=SE_ACCESS_NAME_SPECIFIC_4 + Language=English +Unknown specific access (bit 4) +. + + +MessageId=0x0615 + SymbolicName=SE_ACCESS_NAME_SPECIFIC_5 + Language=English +Unknown specific access (bit 5) +. + + +MessageId=0x0616 + SymbolicName=SE_ACCESS_NAME_SPECIFIC_6 + Language=English +Unknown specific access (bit 6) +. + + +MessageId=0x0617 + SymbolicName=SE_ACCESS_NAME_SPECIFIC_7 + Language=English +Unknown specific access (bit 7) +. + + +MessageId=0x0618 + SymbolicName=SE_ACCESS_NAME_SPECIFIC_8 + Language=English +Unknown specific access (bit 8) +. + + +MessageId=0x0619 + SymbolicName=SE_ACCESS_NAME_SPECIFIC_9 + Language=English +Unknown specific access (bit 9) +. + + +MessageId=0x061A + SymbolicName=SE_ACCESS_NAME_SPECIFIC_10 + Language=English +Unknown specific access (bit 10) +. + + +MessageId=0x061B + SymbolicName=SE_ACCESS_NAME_SPECIFIC_11 + Language=English +Unknown specific access (bit 11) +. + + +MessageId=0x061C + SymbolicName=SE_ACCESS_NAME_SPECIFIC_12 + Language=English +Unknown specific access (bit 12) +. + + +MessageId=0x061D + SymbolicName=SE_ACCESS_NAME_SPECIFIC_13 + Language=English +Unknown specific access (bit 13) +. + + +MessageId=0x061E + SymbolicName=SE_ACCESS_NAME_SPECIFIC_14 + Language=English +Unknown specific access (bit 14) +. + + +MessageId=0x061F + SymbolicName=SE_ACCESS_NAME_SPECIFIC_15 + Language=English +Unknown specific access (bit 15) +. + + + + + + + +; +;////////////////////////////////////////////////////////////////////////////// +;// // +;// // +;// Privilege names as we would like // +;// them displayed for auditing // +;// // +;// // +;// // +;// NOTE: Eventually we will need a way to extend this mechanism to allow // +;// for ISV and end-user defined privileges. One way would be to // +;// stick a mapping from source/privilege name to parameter message // +;// file offset in the registry. This is ugly and I don't like it, // +;// but it works. Something else would be prefereable. // +;// // +;// THIS IS A BIT OF A HACK RIGHT NOW. IT IS BASED UPON THE // +;// ASSUMPTION THAT ALL THE PRIVILEGES ARE WELL-KNOWN AND THAT // +;// THEIR VALUE ARE ALL CONTIGUOUS. // +;// // +;// // +;// // +;// // +;// // +;////////////////////////////////////////////////////////////////////////////// + + +MessageId=0x0641 + SymbolicName=SE_ADT_PRIV_BASE + Language=English +Not used +. + +MessageId=0x0643 + SymbolicName=SE_ADT_PRIV_3 + Language=English +Assign Primary Token Privilege +. +MessageId=0x0644 + SymbolicName=SE_ADT_PRIV_4 + Language=English +Lock Memory Privilege +. +MessageId=0x0645 + SymbolicName=SE_ADT_PRIV_5 + Language=English +Increase Memory Quota Privilege +. +MessageId=0x0646 + SymbolicName=SE_ADT_PRIV_6 + Language=English +Unsolicited Input Privilege +. +MessageId=0x0647 + SymbolicName=SE_ADT_PRIV_7 + Language=English +Trusted Computer Base Privilege +. +MessageId=0x0648 + SymbolicName=SE_ADT_PRIV_8 + Language=English +Security Privilege +. +MessageId=0x0649 + SymbolicName=SE_ADT_PRIV_9 + Language=English +Take Ownership Privilege +. +MessageId=0x064A + SymbolicName=SE_ADT_PRIV_10 + Language=English +Load/Unload Driver Privilege +. +MessageId=0x064B + SymbolicName=SE_ADT_PRIV_11 + Language=English +Profile System Privilege +. +MessageId=0x064C + SymbolicName=SE_ADT_PRIV_12 + Language=English +Set System Time Privilege +. +MessageId=0x064D + SymbolicName=SE_ADT_PRIV_13 + Language=English +Profile Single Process Privilege +. +MessageId=0x064E + SymbolicName=SE_ADT_PRIV_14 + Language=English +Increment Base Priority Privilege +. +MessageId=0x064F + SymbolicName=SE_ADT_PRIV_15 + Language=English +Create Pagefile Privilege +. +MessageId=0x0650 + SymbolicName=SE_ADT_PRIV_16 + Language=English +Create Permanent Object Privilege +. +MessageId=0x0651 + SymbolicName=SE_ADT_PRIV_17 + Language=English +Backup Privilege +. +MessageId=0x0652 + SymbolicName=SE_ADT_PRIV_18 + Language=English +Restore From Backup Privilege +. +MessageId=0x0653 + SymbolicName=SE_ADT_PRIV_19 + Language=English +Shutdown System Privilege +. +MessageId=0x0654 + SymbolicName=SE_ADT_PRIV_20 + Language=English +Debug Privilege +. +MessageId=0x0655 + SymbolicName=SE_ADT_PRIV_21 + Language=English +View or Change Audit Log Privilege +. +MessageId=0x0656 + SymbolicName=SE_ADT_PRIV_22 + Language=English +Change Hardware Environment Privilege +. +MessageId=0x0657 + SymbolicName=SE_ADT_PRIV_23 + Language=English +Change Notify (and Traverse) Privilege +. +MessageId=0x0658 + SymbolicName=SE_ADT_PRIV_24 + Language=English +Remotely Shut System Down Privilege +. + + + + + + + + + + + + + + + +; +;////////////////////////////////////////////////////////////////////////////// +;// // +;// // +;// Executive object access types as // +;// we would like them displayed // +;// for auditing // +;// // +;// Executive objects are: // +;// // +;// Channel // +;// Device // +;// Directory // +;// Event // +;// EventPair // +;// File // +;// IoCompletion // +;// Key // +;// Mutant // +;// Port // +;// Process // +;// Profile // +;// Section // +;// Semaphore // +;// SymbolicLink // +;// Thread // +;// Timer // +;// Token // +;// Type // +;// // +;// // +;// Note that there are other kernel objects, but they // +;// are not visible outside of the executive and are so // +;// not subject to auditing. These objects include // +;// // +;// Adaptor // +;// Controller // +;// Driver // +;// // +;// // +;// // +;////////////////////////////////////////////////////////////////////////////// + + + + + +;// +;// DEVICE object-specific access types +;// + +MessageId=0x1100 + SymbolicName=MS_DEVICE_ACCESS_BIT_0 + Language=English +Device Access Bit0 +. +MessageId=0x1101 + SymbolicName=MS_DEVICE_ACCESS_BIT_1 + Language=English +Device Access Bit 1 +. +MessageId=0x1102 + SymbolicName=MS_DEVICE_ACCESS_BIT_2 + Language=English +Device Access Bit 2 +. +MessageId=0x1103 + SymbolicName=MS_DEVICE_ACCESS_BIT_3 + Language=English +Device Access Bit 3 +. +MessageId=0x1104 + SymbolicName=MS_DEVICE_ACCESS_BIT_4 + Language=English +Device Access Bit 4 +. +MessageId=0x1105 + SymbolicName=MS_DEVICE_ACCESS_BIT_5 + Language=English +Device Access Bit 5 +. +MessageId=0x1106 + SymbolicName=MS_DEVICE_ACCESS_BIT_6 + Language=English +Device Access Bit 6 +. +MessageId=0x1107 + SymbolicName=MS_DEVICE_ACCESS_BIT_7 + Language=English +Device Access Bit 7 +. +MessageId=0x1108 + SymbolicName=MS_DEVICE_ACCESS_BIT_8 + Language=English +Device Access Bit 8 +. + + + +;// +;// object DIRECTORY object-specific access types +;// + +MessageId=0x1110 + SymbolicName=MS_OBJECT_DIR_ACCESS_BIT_0 + Language=English +Query directory +. +MessageId=0x1111 + SymbolicName=MS_OBJECT_DIR_ACCESS_BIT_1 + Language=English +Traverse +. +MessageId=0x1112 + SymbolicName=MS_OBJECT_DIR_ACCESS_BIT_2 + Language=English +Create object in directory +. +MessageId=0x1113 + SymbolicName=MS_OBJECT_DIR_ACCESS_BIT_3 + Language=English +Create sub-directory +. + + +;// +;// EVENT object-specific access types +;// + +MessageId=0x1120 + SymbolicName=MS_EVENT_ACCESS_BIT_0 + Language=English +Query event state +. +MessageId=0x1121 + SymbolicName=MS_EVENT_ACCESS_BIT_1 + Language=English +Modify event state +. + + + +;// +;// EVENT-PAIR object-specific access types +;// + +;// +;// Event pairs have no object-type-specific access bits. +;// they use synchronize. +;// +;// reserve 0x1130 for future use and continuity +;// + + +;// +;// File-specific access types +;// (these are funny because they sorta hafta take directories +;// and named pipes into account as well). +;// + +MessageId=0x1140 + SymbolicName=MS_FILE_ACCESS_BIT_0 + Language=English +ReadData (or ListDirectory) +. +MessageId=0x1141 + SymbolicName=MS_FILE_ACCESS_BIT_1 + Language=English +WriteData (or AddFile) +. +MessageId=0x1142 + SymbolicName=MS_FILE_ACCESS_BIT_2 + Language=English +AppendData (or AddSubdirectory or CreatePipeInstance) +. +MessageId=0x1143 + SymbolicName=MS_FILE_ACCESS_BIT_3 + Language=English +ReadEA +. +MessageId=0x1144 + SymbolicName=MS_FILE_ACCESS_BIT_4 + Language=English +WriteEA +. +MessageId=0x1145 + SymbolicName=MS_FILE_ACCESS_BIT_5 + Language=English +Execute/Traverse +. +MessageId=0x1146 + SymbolicName=MS_FILE_ACCESS_BIT_6 + Language=English +DeleteChild +. +MessageId=0x1147 + SymbolicName=MS_FILE_ACCESS_BIT_7 + Language=English +ReadAttributes +. +MessageId=0x1148 + SymbolicName=MS_FILE_ACCESS_BIT_8 + Language=English +WriteAttributes +. + + + +;// +;// KEY object-specific access types +;// + +MessageId=0x1150 + SymbolicName=MS_KEY_ACCESS_BIT_0 + Language=English +Query key value +. + +MessageId=0x1151 + SymbolicName=MS_KEY_ACCESS_BIT_1 + Language=English +Set key value +. + +MessageId=0x1152 + SymbolicName=MS_KEY_ACCESS_BIT_2 + Language=English +Create sub-key +. + +MessageId=0x1153 + SymbolicName=MS_KEY_ACCESS_BIT_3 + Language=English +Enumerate sub-keys +. + +MessageId=0x1154 + SymbolicName=MS_KEY_ACCESS_BIT_4 + Language=English +Notify about changes to keys +. + +MessageId=0x1155 + SymbolicName=MS_KEY_ACCESS_BIT_5 + Language=English +Create Link +. + + +;// +;// MUTANT object-specific access types +;// + +MessageId=0x1160 + SymbolicName=MS_MUTANT_ACCESS_BIT_0 + Language=English +Query mutant state +. + + + +;// +;// lpc PORT object-specific access types +;// + +MessageId=0x1170 + SymbolicName=MS_LPC_PORT_ACCESS_BIT_0 + Language=English +Communicate using port +. + + + +;// +;// Process object-specific access types +;// + +MessageId=0x1180 + SymbolicName=MS_PROCESS_ACCESS_BIT_0 + Language=English +Force process termination +. +MessageId=0x1181 + SymbolicName=MS_PROCESS_ACCESS_BIT_1 + Language=English +Create new thread in process +. +MessageId=0x1182 + SymbolicName=MS_PROCESS_ACCESS_BIT_2 + Language=English +Unused access bit +. +MessageId=0x1183 + SymbolicName=MS_PROCESS_ACCESS_BIT_3 + Language=English +Perform virtual memory operation +. +MessageId=0x1184 + SymbolicName=MS_PROCESS_ACCESS_BIT_4 + Language=English +Read from process memory +. +MessageId=0x1185 + SymbolicName=MS_PROCESS_ACCESS_BIT_5 + Language=English +Write to process memory +. +MessageId=0x1186 + SymbolicName=MS_PROCESS_ACCESS_BIT_6 + Language=English +Duplicate handle into or out of process +. +MessageId=0x1187 + SymbolicName=MS_PROCESS_ACCESS_BIT_7 + Language=English +Create a subprocess of process +. +MessageId=0x1188 + SymbolicName=MS_PROCESS_ACCESS_BIT_8 + Language=English +Set process quotas +. +MessageId=0x1189 + SymbolicName=MS_PROCESS_ACCESS_BIT_9 + Language=English +Set process information +. +MessageId=0x118A + SymbolicName=MS_PROCESS_ACCESS_BIT_A + Language=English +Query process information +. +MessageId=0x118B + SymbolicName=MS_PROCESS_ACCESS_BIT_B + Language=English +Set process termination port +. + + + +;// +;// PROFILE object-specific access types +;// + +MessageId=0x1190 + SymbolicName=MS_PROFILE_ACCESS_BIT_0 + Language=English +Control profile +. + + +;// +;// SECTION object-specific access types +;// + +MessageId=0x11A0 + SymbolicName=MS_SECTION_ACCESS_BIT_0 + Language=English +Query section state +. +MessageId=0x11A1 + SymbolicName=MS_SECTION_ACCESS_BIT_1 + Language=English +Map section for write +. +MessageId=0x11A2 + SymbolicName=MS_SECTION_ACCESS_BIT_2 + Language=English +Map section for read +. +MessageId=0x11A3 + SymbolicName=MS_SECTION_ACCESS_BIT_3 + Language=English +Map section for execute +. +MessageId=0x11A4 + SymbolicName=MS_SECTION_ACCESS_BIT_4 + Language=English +Extend size +. + + + +;// +;// SEMAPHORE object-specific access types +;// + +MessageId=0x11B0 + SymbolicName=MS_SEMAPHORE_ACCESS_BIT_0 + Language=English +Query semaphore state +. + +MessageId=0x11B1 + SymbolicName=MS_SEMAPHORE_ACCESS_BIT_1 + Language=English +Modify semaphore state +. + + +;// +;// SymbolicLink object-specific access types +;// + +MessageId=0x11C0 + SymbolicName=MS_SYMB_LINK_ACCESS_BIT_0 + Language=English +Use symbolic link +. + + + + + +;// +;// Thread object-specific access types +;// + +MessageId=0x11D0 + SymbolicName=MS_THREAD_ACCESS_BIT_0 + Language=English +Force thread termination +. +MessageId=0x11D1 + SymbolicName=MS_THREAD_ACCESS_BIT_1 + Language=English +Suspend or resume thread +. +MessageId=0x11D2 + SymbolicName=MS_THREAD_ACCESS_BIT_2 + Language=English +Send an alert to thread +. +MessageId=0x11D3 + SymbolicName=MS_THREAD_ACCESS_BIT_3 + Language=English +Get thread context +. +MessageId=0x11D4 + SymbolicName=MS_THREAD_ACCESS_BIT_4 + Language=English +Set thread context +. +MessageId=0x11D5 + SymbolicName=MS_THREAD_ACCESS_BIT_5 + Language=English +Set thread information +. +MessageId=0x11D6 + SymbolicName=MS_THREAD_ACCESS_BIT_6 + Language=English +Query thread information +. +MessageId=0x11D7 + SymbolicName=MS_THREAD_ACCESS_BIT_7 + Language=English +Assign a token to the thread +. +MessageId=0x11D8 + SymbolicName=MS_THREAD_ACCESS_BIT_8 + Language=English +Cause thread to directly impersonate another thread +. +MessageId=0x11D9 + SymbolicName=MS_THREAD_ACCESS_BIT_9 + Language=English +Directly impersonate this thread +. + + + + +;// +;// TIMER object-specific access types +;// + +MessageId=0x11E0 + SymbolicName=MS_TIMER_ACCESS_BIT_0 + Language=English +Query timer state +. +MessageId=0x11E1 + SymbolicName=MS_TIMER_ACCESS_BIT_1 + Language=English +Modify timer state +. + + +;// +;// Token-specific access types +;// + +MessageId=0x11F0 + SymbolicName=MS_TOKEN_ACCESS_BIT_0 + Language=English +AssignAsPrimary +. +MessageId=0x11F1 + SymbolicName=MS_TOKEN_ACCESS_BIT_1 + Language=English +Duplicate +. +MessageId=0x11F2 + SymbolicName=MS_TOKEN_ACCESS_BIT_2 + Language=English +Impersonate +. +MessageId=0x11F3 + SymbolicName=MS_TOKEN_ACCESS_BIT_3 + Language=English +Query +. +MessageId=0x11F4 + SymbolicName=MS_TOKEN_ACCESS_BIT_4 + Language=English +QuerySource +. +MessageId=0x11F5 + SymbolicName=MS_TOKEN_ACCESS_BIT_5 + Language=English +AdjustPrivileges +. +MessageId=0x11F6 + SymbolicName=MS_TOKEN_ACCESS_BIT_6 + Language=English +AdjustGroups +. +MessageId=0x11F7 + SymbolicName=MS_TOKEN_ACCESS_BIT_7 + Language=English +AdjustDefaultDacl +. + + + +;// +;// OBJECT_TYPE object-specific access types +;// + +MessageId=0x1200 + SymbolicName=MS_OBJECT_TYPE_ACCESS_BIT_0 + Language=English +Create instance of object type +. + + + +;// +;// IoCompletion object-specific access types +;// + +MessageId=0x1300 + SymbolicName=MS_IO_COMPLETION_ACCESS_BIT_0 + Language=English +Query State +. + +MessageId=0x1301 + SymbolicName=MS_IO_COMPLETION_ACCESS_BIT_1 + Language=English +Modify State +. + + + +;// +;// CHANNEL object-specific access types +;// + +MessageId=0x1400 + SymbolicName=MS_CHANNEL_ACCESS_BIT_0 + Language=English +Channel read message +. +MessageId=0x1401 + SymbolicName=MS_CHANNEL_ACCESS_BIT_1 + Language=English +Channel write message +. +MessageId=0x1402 + SymbolicName=MS_CHANNEL_ACCESS_BIT_2 + Language=English +Channel query information +. +MessageId=0x1403 + SymbolicName=MS_CHANNEL_ACCESS_BIT_3 + Language=English +Channel set information +. + + + +; +;////////////////////////////////////////////////////////////////////////////// +;// // +;// // +;// Security Acount Manager Object Access // +;// names as we would like them // +;// displayed for auditing // +;// // +;// SAM objects are: // +;// // +;// SAM_SERVER // +;// SAM_DOMAIN // +;// SAM_GROUP // +;// SAM_ALIAS // +;// SAM_USER // +;// // +;// // +;// // +;////////////////////////////////////////////////////////////////////////////// + + + + + + +;// +;// SAM_SERVER object-specific access types +;// + +MessageId=0x1500 + SymbolicName=MS_SAM_SERVER_ACCESS_BIT_0 + Language=English +ConnectToServer +. +MessageId=0x1501 + SymbolicName=MS_SAM_SERVER_ACCESS_BIT_1 + Language=English +ShutdownServer +. +MessageId=0x1502 + SymbolicName=MS_SAM_SERVER_ACCESS_BIT_2 + Language=English +InitializeServer +. +MessageId=0x1503 + SymbolicName=MS_SAM_SERVER_ACCESS_BIT_3 + Language=English +CreateDomain +. +MessageId=0x1504 + SymbolicName=MS_SAM_SERVER_ACCESS_BIT_4 + Language=English +EnumerateDomains +. +MessageId=0x1505 + SymbolicName=MS_SAM_SERVER_ACCESS_BIT_5 + Language=English +LookupDomain +. + + + + +;// +;// SAM_DOMAIN object-specific access types +;// + +MessageId=0x1510 + SymbolicName=MS_SAM_DOMAIN_ACCESS_BIT_0 + Language=English +ReadPasswordParameters +. +MessageId=0x1511 + SymbolicName=MS_SAM_DOMAIN_ACCESS_BIT_1 + Language=English +WritePasswordParameters +. +MessageId=0x1512 + SymbolicName=MS_SAM_DOMAIN_ACCESS_BIT_2 + Language=English +ReadOtherParameters +. +MessageId=0x1513 + SymbolicName=MS_SAM_DOMAIN_ACCESS_BIT_3 + Language=English +WriteOtherParameters +. +MessageId=0x1514 + SymbolicName=MS_SAM_DOMAIN_ACCESS_BIT_4 + Language=English +CreateUser +. +MessageId=0x1515 + SymbolicName=MS_SAM_DOMAIN_ACCESS_BIT_5 + Language=English +CreateGlobalGroup +. +MessageId=0x1516 + SymbolicName=MS_SAM_DOMAIN_ACCESS_BIT_6 + Language=English +CreateLocalGroup +. +MessageId=0x1517 + SymbolicName=MS_SAM_DOMAIN_ACCESS_BIT_7 + Language=English +GetLocalGroupMembership +. +MessageId=0x1518 + SymbolicName=MS_SAM_DOMAIN_ACCESS_BIT_8 + Language=English +ListAccounts +. +MessageId=0x1519 + SymbolicName=MS_SAM_DOMAIN_ACCESS_BIT_9 + Language=English +LookupIDs +. +MessageId=0x151A + SymbolicName=MS_SAM_DOMAIN_ACCESS_BIT_A + Language=English +AdministerServer +. + + + + +;// +;// SAM_GROUP (global) object-specific access types +;// + +MessageId=0x1520 + SymbolicName=MS_SAM_GLOBAL_GRP_ACCESS_BIT_0 + Language=English +ReadInformation +. +MessageId=0x1521 + SymbolicName=MS_SAM_GLOBAL_GRP_ACCESS_BIT_1 + Language=English +WriteAccount +. +MessageId=0x1522 + SymbolicName=MS_SAM_GLOBAL_GRP_ACCESS_BIT_2 + Language=English +AddMember +. +MessageId=0x1523 + SymbolicName=MS_SAM_GLOBAL_GRP_ACCESS_BIT_3 + Language=English +RemoveMember +. +MessageId=0x1524 + SymbolicName=MS_SAM_GLOBAL_GRP_ACCESS_BIT_4 + Language=English +ListMembers +. + + + + +;// +;// SAM_ALIAS (local group) object-specific access types +;// + +MessageId=0x1530 + SymbolicName=MS_SAM_LOCAL_GRP_ACCESS_BIT_0 + Language=English +AddMember +. +MessageId=0x1531 + SymbolicName=MS_SAM_LOCAL_GRP_ACCESS_BIT_1 + Language=English +RemoveMember +. +MessageId=0x1532 + SymbolicName=MS_SAM_LOCAL_GRP_ACCESS_BIT_2 + Language=English +ListMembers +. +MessageId=0x1533 + SymbolicName=MS_SAM_LOCAL_GRP_ACCESS_BIT_3 + Language=English +ReadInformation +. +MessageId=0x1534 + SymbolicName=MS_SAM_LOCAL_GRP_ACCESS_BIT_4 + Language=English +WriteAccount +. + + + + +;// +;// SAM_USER object-specific access types +;// + +MessageId=0x1540 + SymbolicName=MS_SAM_USER_ACCESS_BIT_0 + Language=English +ReadGeneralInformation +. +MessageId=0x1541 + SymbolicName=MS_SAM_USER_ACCESS_BIT_1 + Language=English +ReadPreferences +. +MessageId=0x1542 + SymbolicName=MS_SAM_USER_ACCESS_BIT_2 + Language=English +WritePreferences +. +MessageId=0x1543 + SymbolicName=MS_SAM_USER_ACCESS_BIT_3 + Language=English +ReadLogon +. +MessageId=0x1544 + SymbolicName=MS_SAM_USER_ACCESS_BIT_4 + Language=English +ReadAccount +. +MessageId=0x1545 + SymbolicName=MS_SAM_USER_ACCESS_BIT_5 + Language=English +WriteAccount +. +MessageId=0x1546 + SymbolicName=MS_SAM_USER_ACCESS_BIT_6 + Language=English +ChangePassword (with knowledge of old password) +. +MessageId=0x1547 + SymbolicName=MS_SAM_USER_ACCESS_BIT_7 + Language=English +SetPassword (without knowledge of old password) +. +MessageId=0x1548 + SymbolicName=MS_SAM_USER_ACCESS_BIT_8 + Language=English +ListGroups +. +MessageId=0x1549 + SymbolicName=MS_SAM_USER_ACCESS_BIT_9 + Language=English +ReadGroupMembership +. +MessageId=0x154A + SymbolicName=MS_SAM_USER_ACCESS_BIT_A + Language=English +ChangeGroupMembership +. + + + + + +; +;////////////////////////////////////////////////////////////////////////////// +;// // +;// // +;// Local Security Authority Object Access // +;// names as we would like them // +;// displayed for auditing // +;// // +;// LSA objects are: // +;// // +;// PolicyObject // +;// SecretObject // +;// TrustedDomainObject // +;// UserAccountObject // +;// // +;// // +;// // +;////////////////////////////////////////////////////////////////////////////// + + + +;// +;// lsa POLICY object-specific access types +;// + +MessageId=0x1600 + SymbolicName=MS_LSA_POLICY_ACCESS_BIT_0 + Language=English +View non-sensitive policy information +. +MessageId=0x1601 + SymbolicName=MS_LSA_POLICY_ACCESS_BIT_1 + Language=English +View system audit requirements +. +MessageId=0x1602 + SymbolicName=MS_LSA_POLICY_ACCESS_BIT_2 + Language=English +Get sensitive policy information +. +MessageId=0x1603 + SymbolicName=MS_LSA_POLICY_ACCESS_BIT_3 + Language=English +Modify domain trust relationships +. +MessageId=0x1604 + SymbolicName=MS_LSA_POLICY_ACCESS_BIT_4 + Language=English +Create special accounts (for assignment of user rights) +. +MessageId=0x1605 + SymbolicName=MS_LSA_POLICY_ACCESS_BIT_5 + Language=English +Create a secret object +. +MessageId=0x1606 + SymbolicName=MS_LSA_POLICY_ACCESS_BIT_6 + Language=English +Create a privilege +. +MessageId=0x1607 + SymbolicName=MS_LSA_POLICY_ACCESS_BIT_7 + Language=English +Set default quota limits +. +MessageId=0x1608 + SymbolicName=MS_LSA_POLICY_ACCESS_BIT_8 + Language=English +Change system audit requirements +. +MessageId=0x1609 + SymbolicName=MS_LSA_POLICY_ACCESS_BIT_9 + Language=English +Administer audit log attributes +. +MessageId=0x160A + SymbolicName=MS_LSA_POLICY_ACCESS_BIT_A + Language=English +Enable/Disable LSA +. +MessageId=0x160B + SymbolicName=MS_LSA_POLICY_ACCESS_BIT_B + Language=English +Lookup Names/SIDs +. + + +;// +;// lsa SecretObject object-specific access types +;// + +MessageId=0x1610 + SymbolicName=MS_LSA_SECRET_ACCESS_BIT_0 + Language=English +Change secret value +. +MessageId=0x1611 + SymbolicName=MS_LSA_SECRET_ACCESS_BIT_1 + Language=English +Query secret value +. + + + + +;// +;// lsa TrustedDomainObject object-specific access types +;// + +MessageId=0x1620 + SymbolicName=MS_LSA_TRUST_ACCESS_BIT_0 + Language=English +Query trusted domain name/SID +. +MessageId=0x1621 + SymbolicName=MS_LSA_TRUST_ACCESS_BIT_1 + Language=English +Retrieve the controllers in the trusted domain +. +MessageId=0x1622 + SymbolicName=MS_LSA_TRUST_ACCESS_BIT_2 + Language=English +Change the controllers in the trusted domain +. +MessageId=0x1623 + SymbolicName=MS_LSA_TRUST_ACCESS_BIT_3 + Language=English +Query the Posix ID offset assigned to the trusted domain +. +MessageId=0x1624 + SymbolicName=MS_LSA_TRUST_ACCESS_BIT_4 + Language=English +Change the Posix ID offset assigned to the trusted domain +. + + + + +;// +;// lsa UserAccount (privileged account) object-specific access types +;// + +MessageId=0x1630 + SymbolicName=MS_LSA_ACCOUNT_ACCESS_BIT_0 + Language=English +Query account information +. +MessageId=0x1631 + SymbolicName=MS_LSA_ACCOUNT_ACCESS_BIT_1 + Language=English +Change privileges assigned to account +. +MessageId=0x1632 + SymbolicName=MS_LSA_ACCOUNT_ACCESS_BIT_2 + Language=English +Change quotas assigned to account +. +MessageId=0x1633 + SymbolicName=MS_LSA_ACCOUNT_ACCESS_BIT_3 + Language=English +Change logon capabilities assigned to account +. + + + + +; +;////////////////////////////////////////////////////////////////////////////// +;// // +;// // +;// Window Station Object Access // +;// names as we would like them // +;// displayed for auditing // +;// // +;// Window Station objects are: // +;// // +;// WindowStation // +;// Desktop // +;// // +;// // +;// // +;////////////////////////////////////////////////////////////////////////////// + + + +;// +;// WINDOW_STATION object-specific access types +;// + +MessageId=0x1A00 + SymbolicName=MS_WIN_STA_ACCESS_BIT_0 + Language=English +Enumerate desktops +. + +MessageId=0x1A01 + SymbolicName=MS_WIN_STA_ACCESS_BIT_1 + Language=English +Read attributes +. + +MessageId=0x1A02 + SymbolicName=MS_WIN_STA_ACCESS_BIT_2 + Language=English +Access Clipboard +. + +MessageId=0x1A03 + SymbolicName=MS_WIN_STA_ACCESS_BIT_3 + Language=English +Create desktop +. + +MessageId=0x1A04 + SymbolicName=MS_WIN_STA_ACCESS_BIT_4 + Language=English +Write attributes +. + +MessageId=0x1A05 + SymbolicName=MS_WIN_STA_ACCESS_BIT_5 + Language=English +Access global atoms +. + +MessageId=0x1A06 + SymbolicName=MS_WIN_STA_ACCESS_BIT_6 + Language=English +Exit windows +. + +MessageId=0x1A07 + SymbolicName=MS_WIN_STA_ACCESS_BIT_7 + Language=English +Unused Access Flag +. + +MessageId=0x1A08 + SymbolicName=MS_WIN_STA_ACCESS_BIT_8 + Language=English +Include this windowstation in enumerations +. + +MessageId=0x1A09 + SymbolicName=MS_WIN_STA_ACCESS_BIT_9 + Language=English +Read screen +. + + + +;// +;// DESKTOP object-specific access types +;// + +MessageId=0x1A10 + SymbolicName=MS_DESKTOP_ACCESS_BIT_0 + Language=English +Read Objects +. + +MessageId=0x1A11 + SymbolicName=MS_DESKTOP_ACCESS_BIT_1 + Language=English +Create window +. + +MessageId=0x1A12 + SymbolicName=MS_DESKTOP_ACCESS_BIT_2 + Language=English +Create menu +. + +MessageId=0x1A13 + SymbolicName=MS_DESKTOP_ACCESS_BIT_3 + Language=English +Hook control +. + +MessageId=0x1A14 + SymbolicName=MS_DESKTOP_ACCESS_BIT_4 + Language=English +Journal (record) +. + +MessageId=0x1A15 + SymbolicName=MS_DESKTOP_ACCESS_BIT_5 + Language=English +Journal (playback) +. + +MessageId=0x1A16 + SymbolicName=MS_DESKTOP_ACCESS_BIT_6 + Language=English +Include this desktop in enumerations +. + +MessageId=0x1A17 + SymbolicName=MS_DESKTOP_ACCESS_BIT_7 + Language=English +Write objects +. + +MessageId=0x1A18 + SymbolicName=MS_DESKTOP_ACCESS_BIT_8 + Language=English +Switch to this desktop +. + + + +; +;////////////////////////////////////////////////////////////////////////////// +;// // +;// // +;// Print Server Object Access // +;// names as we would like them // +;// displayed for auditing // +;// // +;// Print Server objects are: // +;// // +;// Server // +;// Printer // +;// Document // +;// // +;// // +;////////////////////////////////////////////////////////////////////////////// + + + +;// +;// print-server SERVER object-specific access types +;// + +MessageId=0x1B00 + SymbolicName=MS_PRINT_SERVER_ACCESS_BIT_0 + Language=English +Administer print server +. + +MessageId=0x1B01 + SymbolicName=MS_PRINT_SERVER_ACCESS_BIT_1 + Language=English +Enumerate printers +. + +;// +;// print-server PRINTER object-specific access types +;// +;// Note that these are based at 0x1B10, but the first +;// two bits aren't defined. +;// + +MessageId=0x1B12 + SymbolicName=MS_PRINTER_ACCESS_BIT_0 + Language=English +Full Control +. + +MessageId=0x1B13 + SymbolicName=MS_PRINTER_ACCESS_BIT_1 + Language=English +Print +. + +;// +;// print-server DOCUMENT object-specific access types +;// +;// Note that these are based at 0x1B20, but the first +;// four bits aren't defined. + +MessageId=0x1B14 + SymbolicName=MS_PRINTER_DOC_ACCESS_BIT_0 + Language=English +Administer Document +. + + + +; +;////////////////////////////////////////////////////////////////////////////// +;// // +;// // +;// Service Controller Object Access // +;// names as we would like them // +;// displayed for auditing // +;// // +;// Service Controller objects are: // +;// // +;// SC_MANAGER Object // +;// SERVICE Object // +;// // +;// // +;////////////////////////////////////////////////////////////////////////////// + + + + +;// +;// SERVICE CONTROLLER "SC_MANAGER Object" object-specific access types +;// + +MessageId=0x1C00 + SymbolicName=MS_SC_MANAGER_ACCESS_BIT_0 + Language=English +Connect to service controller +. + +MessageId=0x1C01 + SymbolicName=MS_SC_MANAGER_ACCESS_BIT_1 + Language=English +Create a new service +. + +MessageId=0x1C02 + SymbolicName=MS_SC_MANAGER_ACCESS_BIT_2 + Language=English +Enumerate services +. + +MessageId=0x1C03 + SymbolicName=MS_SC_MANAGER_ACCESS_BIT_3 + Language=English +Lock service database for exclusive access +. + +MessageId=0x1C04 + SymbolicName=MS_SC_MANAGER_ACCESS_BIT_4 + Language=English +Query service database lock state +. + +MessageId=0x1C05 + SymbolicName=MS_SC_MANAGER_ACCESS_BIT_5 + Language=English +Set last-known-good state of service database +. + + +;// +;// SERVICE CONTROLLER "SERVICE Object" object-specific access types +;// + +MessageId=0x1C10 + SymbolicName=MS_SC_SERVICE_ACCESS_BIT_0 + Language=English +Query service configuration information +. + +MessageId=0x1C11 + SymbolicName=MS_SC_SERVICE_ACCESS_BIT_1 + Language=English +Set service configuration information +. + +MessageId=0x1C12 + SymbolicName=MS_SC_SERVICE_ACCESS_BIT_2 + Language=English +Query status of service +. + +MessageId=0x1C13 + SymbolicName=MS_SC_SERVICE_ACCESS_BIT_3 + Language=English +Enumerate dependencies of service +. + +MessageId=0x1C14 + SymbolicName=MS_SC_SERVICE_ACCESS_BIT_4 + Language=English +Start the service +. + +MessageId=0x1C15 + SymbolicName=MS_SC_SERVICE_ACCESS_BIT_5 + Language=English +Stop the service +. + +MessageId=0x1C16 + SymbolicName=MS_SC_SERVICE_ACCESS_BIT_6 + Language=English +Pause or continue the service +. + +MessageId=0x1C17 + SymbolicName=MS_SC_SERVICE_ACCESS_BIT_7 + Language=English +Query information from service +. + +MessageId=0x1C18 + SymbolicName=MS_SC_SERVICE_ACCESS_BIT_8 + Language=English +Issue service-specific control commands +. + + + + +; +;////////////////////////////////////////////////////////////////////////////// +;// // +;// // +;// NetDDE Object Access // +;// names as we would like them // +;// displayed for auditing // +;// // +;// NetDDE objects are: // +;// // +;// DDE Share // +;// // +;// // +;////////////////////////////////////////////////////////////////////////////// + + +;// +;// Net DDE object-specific access types +;// + + +;// +;// DDE Share object-specific access types +;// + +MessageId=0x1D00 + SymbolicName=MS_DDE_SHARE_ACCESS_BIT_0 + Language=English +DDE Share Read +. + +MessageId=0x1D01 + SymbolicName=MS_DDE_SHARE_ACCESS_BIT_1 + Language=English +DDE Share Write +. + +MessageId=0x1D02 + SymbolicName=MS_DDE_SHARE_ACCESS_BIT_2 + Language=English +DDE Share Initiate Static +. + +MessageId=0x1D03 + SymbolicName=MS_DDE_SHARE_ACCESS_BIT_3 + Language=English +DDE Share Initiate Link +. + +MessageId=0x1D04 + SymbolicName=MS_DDE_SHARE_ACCESS_BIT_4 + Language=English +DDE Share Request +. + +MessageId=0x1D05 + SymbolicName=MS_DDE_SHARE_ACCESS_BIT_5 + Language=English +DDE Share Advise +. + +MessageId=0x1D06 + SymbolicName=MS_DDE_SHARE_ACCESS_BIT_6 + Language=English +DDE Share Poke +. + +MessageId=0x1D07 + SymbolicName=MS_DDE_SHARE_ACCESS_BIT_7 + Language=English +DDE Share Execute +. + +MessageId=0x1D08 + SymbolicName=MS_DDE_SHARE_ACCESS_BIT_8 + Language=English +DDE Share Add Items +. + +MessageId=0x1D09 + SymbolicName=MS_DDE_SHARE_ACCESS_BIT_9 + Language=English +DDE Share List Items +. + + + + +;/*lint +e767 */ // Resume checking for different macro definitions // winnt +; +; +;#endif // _MSOBJS_ diff --git a/private/ntos/seaudit/msobjs/sources b/private/ntos/seaudit/msobjs/sources new file mode 100644 index 000000000..5e38a08d5 --- /dev/null +++ b/private/ntos/seaudit/msobjs/sources @@ -0,0 +1,41 @@ +!IF 0 + +Copyright (c) 1989 Microsoft Corporation + +Module Name: + + sources. + +Abstract: + + This file specifies the target component being built and the list of + sources files needed to build that component. Also specifies optional + compiler switches and libraries that are unique for the component being + built. + + +Author: + + Steve Wood (stevewo) 12-Apr-1990 + +NOTE: Commented description of this file is in \nt\bak\bin\sources.tpl + +!ENDIF + +MAJORCOMP=ntos +MINORCOMP=msobjs + +TARGETNAME=msobjs +TARGETPATH=\nt\public\sdk\lib + +TARGETLIBS= + +TARGETTYPE=DYNLINK + +INCLUDES=. + +SOURCES= audit.rc + +UMLIBS= + +NTTARGETFILE0=audit.rc |