aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/Doc/library/audit_events.rst
blob: 73a580920246315d4d3b86a7b51ed969371945a2 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
.. _audit-events:

.. index:: single: audit events

Audit events table
==================

This table contains all events raised by :func:`sys.audit` or
:c:func:`PySys_Audit` calls throughout the CPython runtime and the
standard library.  These calls were added in 3.8 or later (see :pep:`578`).

See :func:`sys.addaudithook` and :c:func:`PySys_AddAuditHook` for
information on handling these events.

.. impl-detail::

   This table is generated from the CPython documentation, and may not
   represent events raised by other implementations. See your runtime
   specific documentation for actual events raised.

.. audit-event-table::

The following events are raised internally and do not correspond to any
public API of CPython:

+----------------------------+-------------------------------------------+
| Audit event                | Arguments                                 |
+============================+===========================================+
| _winapi.CreateFile         | ``file_name``, ``desired_access``,        |
|                            | ``share_mode``, ``creation_disposition``, |
|                            | ``flags_and_attributes``                  |
+----------------------------+-------------------------------------------+
| _winapi.CreateJunction     | ``src_path``, ``dst_path``                |
+----------------------------+-------------------------------------------+
| _winapi.CreateNamedPipe    | ``name``, ``open_mode``, ``pipe_mode``    |
+----------------------------+-------------------------------------------+
| _winapi.CreatePipe         |                                           |
+----------------------------+-------------------------------------------+
| _winapi.CreateProcess      | ``application_name``, ``command_line``,   |
|                            | ``current_directory``                     |
+----------------------------+-------------------------------------------+
| _winapi.OpenProcess        | ``process_id``, ``desired_access``        |
+----------------------------+-------------------------------------------+
| _winapi.TerminateProcess   | ``handle``, ``exit_code``                 |
+----------------------------+-------------------------------------------+
| _posixsubprocess.fork_exec | ``exec_list``, ``args``, ``env``          |
+----------------------------+-------------------------------------------+
| ctypes.PyObj_FromPtr       | ``obj``                                   |
+----------------------------+-------------------------------------------+

.. versionadded:: 3.14
   The ``_posixsubprocess.fork_exec`` internal audit event.