2009-07-11 19:15:03 +00:00
|
|
|
/*
|
|
|
|
|
* Asterisk -- An open source telephony toolkit.
|
|
|
|
|
*
|
2012-04-16 21:20:50 +00:00
|
|
|
* Copyright (C) 2012, Digium, Inc.
|
2009-07-11 19:15:03 +00:00
|
|
|
*
|
|
|
|
|
* Russell Bryant <russell@digium.com>
|
|
|
|
|
*
|
|
|
|
|
* See http://www.asterisk.org for more information about
|
|
|
|
|
* the Asterisk project. Please do not directly contact
|
|
|
|
|
* any of the maintainers of this project for assistance;
|
|
|
|
|
* the project provides a web site, mailing lists and IRC
|
|
|
|
|
* channels for your use.
|
|
|
|
|
*
|
|
|
|
|
* This program is free software, distributed under the terms of
|
|
|
|
|
* the GNU General Public License Version 2. See the LICENSE file
|
|
|
|
|
* at the top of the source tree.
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
/*!
|
|
|
|
|
* \file
|
|
|
|
|
*
|
|
|
|
|
* \brief Security Event Reporting Helpers
|
|
|
|
|
*
|
|
|
|
|
* \author Russell Bryant <russell@digium.com>
|
|
|
|
|
*/
|
|
|
|
|
|
2012-06-15 16:20:16 +00:00
|
|
|
/*** MODULEINFO
|
|
|
|
|
<support_level>core</support_level>
|
|
|
|
|
***/
|
|
|
|
|
|
2014-02-06 21:24:32 +00:00
|
|
|
/*** DOCUMENTATION
|
|
|
|
|
<managerEvent language="en_US" name="FailedACL">
|
|
|
|
|
<managerEventInstance class="EVENT_FLAG_SECURITY">
|
|
|
|
|
<synopsis>Raised when a request violates an ACL check.</synopsis>
|
|
|
|
|
<syntax>
|
|
|
|
|
<parameter name="EventTV">
|
|
|
|
|
<para>The time the event was detected.</para>
|
|
|
|
|
</parameter>
|
|
|
|
|
<parameter name="Severity">
|
|
|
|
|
<para>A relative severity of the security event.</para>
|
|
|
|
|
<enumlist>
|
|
|
|
|
<enum name="Informational"/>
|
|
|
|
|
<enum name="Error"/>
|
|
|
|
|
</enumlist>
|
|
|
|
|
</parameter>
|
|
|
|
|
<parameter name="Service">
|
|
|
|
|
<para>The Asterisk service that raised the security event.</para>
|
|
|
|
|
</parameter>
|
|
|
|
|
<parameter name="EventVersion">
|
|
|
|
|
<para>The version of this event.</para>
|
|
|
|
|
</parameter>
|
|
|
|
|
<parameter name="AccountID">
|
|
|
|
|
<para>The Service account associated with the security event
|
|
|
|
|
notification.</para>
|
|
|
|
|
</parameter>
|
|
|
|
|
<parameter name="SessionID">
|
|
|
|
|
<para>A unique identifier for the session in the service
|
|
|
|
|
that raised the event.</para>
|
|
|
|
|
</parameter>
|
|
|
|
|
<parameter name="LocalAddress">
|
|
|
|
|
<para>The address of the Asterisk service that raised the
|
|
|
|
|
security event.</para>
|
|
|
|
|
</parameter>
|
|
|
|
|
<parameter name="RemoteAddress">
|
|
|
|
|
<para>The remote address of the entity that caused the
|
|
|
|
|
security event to be raised.</para>
|
|
|
|
|
</parameter>
|
2014-02-07 16:47:56 +00:00
|
|
|
<parameter name="Module" required="false">
|
2014-02-06 21:24:32 +00:00
|
|
|
<para>If available, the name of the module that raised the event.</para>
|
|
|
|
|
</parameter>
|
2014-02-07 16:47:56 +00:00
|
|
|
<parameter name="ACLName" required="false">
|
2014-02-06 21:24:32 +00:00
|
|
|
<para>If available, the name of the ACL that failed.</para>
|
|
|
|
|
</parameter>
|
2014-02-07 16:47:56 +00:00
|
|
|
<parameter name="SessionTV" required="false">
|
2014-02-06 21:24:32 +00:00
|
|
|
<para>The timestamp reported by the session.</para>
|
|
|
|
|
</parameter>
|
|
|
|
|
</syntax>
|
|
|
|
|
</managerEventInstance>
|
|
|
|
|
</managerEvent>
|
|
|
|
|
<managerEvent language="en_US" name="InvalidAccountID">
|
|
|
|
|
<managerEventInstance class="EVENT_FLAG_SECURITY">
|
|
|
|
|
<synopsis>Raised when a request fails an authentication check due to an invalid account ID.</synopsis>
|
|
|
|
|
<syntax>
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventTV'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Severity'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Service'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventVersion'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='AccountID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='LocalAddress'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='RemoteAddress'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Module'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionTV'])" />
|
|
|
|
|
</syntax>
|
|
|
|
|
</managerEventInstance>
|
|
|
|
|
</managerEvent>
|
|
|
|
|
<managerEvent language="en_US" name="SessionLimit">
|
|
|
|
|
<managerEventInstance class="EVENT_FLAG_SECURITY">
|
|
|
|
|
<synopsis>Raised when a request fails due to exceeding the number of allowed concurrent sessions for that service.</synopsis>
|
|
|
|
|
<syntax>
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventTV'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Severity'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Service'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventVersion'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='AccountID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='LocalAddress'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='RemoteAddress'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Module'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionTV'])" />
|
|
|
|
|
</syntax>
|
|
|
|
|
</managerEventInstance>
|
|
|
|
|
</managerEvent>
|
|
|
|
|
<managerEvent language="en_US" name="MemoryLimit">
|
|
|
|
|
<managerEventInstance class="EVENT_FLAG_SECURITY">
|
|
|
|
|
<synopsis>Raised when a request fails due to an internal memory allocation failure.</synopsis>
|
|
|
|
|
<syntax>
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventTV'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Severity'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Service'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventVersion'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='AccountID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='LocalAddress'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='RemoteAddress'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Module'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionTV'])" />
|
|
|
|
|
</syntax>
|
|
|
|
|
</managerEventInstance>
|
|
|
|
|
</managerEvent>
|
|
|
|
|
<managerEvent language="en_US" name="LoadAverageLimit">
|
|
|
|
|
<managerEventInstance class="EVENT_FLAG_SECURITY">
|
|
|
|
|
<synopsis>Raised when a request fails because a configured load average limit has been reached.</synopsis>
|
|
|
|
|
<syntax>
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventTV'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Severity'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Service'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventVersion'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='AccountID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='LocalAddress'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='RemoteAddress'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Module'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionTV'])" />
|
|
|
|
|
</syntax>
|
|
|
|
|
</managerEventInstance>
|
|
|
|
|
</managerEvent>
|
|
|
|
|
<managerEvent language="en_US" name="RequestNotSupported">
|
|
|
|
|
<managerEventInstance class="EVENT_FLAG_SECURITY">
|
|
|
|
|
<synopsis>Raised when a request fails due to some aspect of the requested item not being supported by the service.</synopsis>
|
|
|
|
|
<syntax>
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventTV'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Severity'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Service'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventVersion'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='AccountID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='LocalAddress'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='RemoteAddress'])" />
|
|
|
|
|
<parameter name="RequestType">
|
|
|
|
|
<para>The type of request attempted.</para>
|
|
|
|
|
</parameter>
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Module'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionTV'])" />
|
|
|
|
|
</syntax>
|
|
|
|
|
</managerEventInstance>
|
|
|
|
|
</managerEvent>
|
|
|
|
|
<managerEvent language="en_US" name="RequestNotAllowed">
|
|
|
|
|
<managerEventInstance class="EVENT_FLAG_SECURITY">
|
|
|
|
|
<synopsis>Raised when a request is not allowed by the service.</synopsis>
|
|
|
|
|
<syntax>
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventTV'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Severity'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Service'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventVersion'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='AccountID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='LocalAddress'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='RemoteAddress'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='RequestNotSupported']/managerEventInstance/syntax/parameter[@name='RequestType'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Module'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionTV'])" />
|
2014-02-07 16:47:56 +00:00
|
|
|
<parameter name="RequestParams" required="false">
|
2014-02-06 21:24:32 +00:00
|
|
|
<para>Parameters provided to the rejected request.</para>
|
|
|
|
|
</parameter>
|
|
|
|
|
</syntax>
|
|
|
|
|
</managerEventInstance>
|
|
|
|
|
</managerEvent>
|
|
|
|
|
<managerEvent language="en_US" name="AuthMethodNotAllowed">
|
|
|
|
|
<managerEventInstance class="EVENT_FLAG_SECURITY">
|
|
|
|
|
<synopsis>Raised when a request used an authentication method not allowed by the service.</synopsis>
|
|
|
|
|
<syntax>
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventTV'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Severity'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Service'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventVersion'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='AccountID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='LocalAddress'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='RemoteAddress'])" />
|
|
|
|
|
<parameter name="AuthMethod">
|
|
|
|
|
<para>The authentication method attempted.</para>
|
|
|
|
|
</parameter>
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Module'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionTV'])" />
|
|
|
|
|
</syntax>
|
|
|
|
|
</managerEventInstance>
|
|
|
|
|
</managerEvent>
|
|
|
|
|
<managerEvent language="en_US" name="RequestBadFormat">
|
|
|
|
|
<managerEventInstance class="EVENT_FLAG_SECURITY">
|
|
|
|
|
<synopsis>Raised when a request is received with bad formatting.</synopsis>
|
|
|
|
|
<syntax>
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventTV'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Severity'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Service'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventVersion'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='AccountID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='LocalAddress'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='RemoteAddress'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='RequestNotSupported']/managerEventInstance/syntax/parameter[@name='RequestType'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Module'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionTV'])" />
|
2014-02-07 16:47:56 +00:00
|
|
|
<parameter name="AccountID" required="false">
|
2014-02-06 21:24:32 +00:00
|
|
|
<para>The account ID associated with the rejected request.</para>
|
|
|
|
|
</parameter>
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='RequestNotAllowed']/managerEventInstance/syntax/parameter[@name='RequestParams'])" />
|
|
|
|
|
</syntax>
|
|
|
|
|
</managerEventInstance>
|
|
|
|
|
</managerEvent>
|
|
|
|
|
<managerEvent language="en_US" name="SuccessfulAuth">
|
|
|
|
|
<managerEventInstance class="EVENT_FLAG_SECURITY">
|
|
|
|
|
<synopsis>Raised when a request successfully authenticates with a service.</synopsis>
|
|
|
|
|
<syntax>
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventTV'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Severity'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Service'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventVersion'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='AccountID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='LocalAddress'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='RemoteAddress'])" />
|
|
|
|
|
<parameter name="UsingPassword">
|
|
|
|
|
<para>Whether or not the authentication attempt included a password.</para>
|
|
|
|
|
</parameter>
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Module'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionTV'])" />
|
|
|
|
|
</syntax>
|
|
|
|
|
</managerEventInstance>
|
|
|
|
|
</managerEvent>
|
|
|
|
|
<managerEvent language="en_US" name="UnexpectedAddress">
|
|
|
|
|
<managerEventInstance class="EVENT_FLAG_SECURITY">
|
|
|
|
|
<synopsis>Raised when a request has a different source address then what is expected for a session already in progress with a service.</synopsis>
|
|
|
|
|
<syntax>
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventTV'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Severity'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Service'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventVersion'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='AccountID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='LocalAddress'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='RemoteAddress'])" />
|
|
|
|
|
<parameter name="ExpectedAddress">
|
|
|
|
|
<para>The address that the request was expected to use.</para>
|
|
|
|
|
</parameter>
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Module'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionTV'])" />
|
|
|
|
|
</syntax>
|
|
|
|
|
</managerEventInstance>
|
|
|
|
|
</managerEvent>
|
|
|
|
|
<managerEvent language="en_US" name="ChallengeResponseFailed">
|
|
|
|
|
<managerEventInstance class="EVENT_FLAG_SECURITY">
|
|
|
|
|
<synopsis>Raised when a request's attempt to authenticate has been challenged, and the request failed the authentication challenge.</synopsis>
|
|
|
|
|
<syntax>
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventTV'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Severity'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Service'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventVersion'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='AccountID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='LocalAddress'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='RemoteAddress'])" />
|
|
|
|
|
<parameter name="Challenge">
|
|
|
|
|
<para>The challenge that was sent.</para>
|
|
|
|
|
</parameter>
|
|
|
|
|
<parameter name="Response">
|
|
|
|
|
<para>The response that was received.</para>
|
|
|
|
|
</parameter>
|
|
|
|
|
<parameter name="ExpectedResponse">
|
|
|
|
|
<para>The expected response to the challenge.</para>
|
|
|
|
|
</parameter>
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Module'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionTV'])" />
|
|
|
|
|
</syntax>
|
|
|
|
|
</managerEventInstance>
|
|
|
|
|
</managerEvent>
|
|
|
|
|
<managerEvent language="en_US" name="InvalidPassword">
|
|
|
|
|
<managerEventInstance class="EVENT_FLAG_SECURITY">
|
|
|
|
|
<synopsis>Raised when a request provides an invalid password during an authentication attempt.</synopsis>
|
|
|
|
|
<syntax>
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventTV'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Severity'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Service'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventVersion'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='AccountID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='LocalAddress'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='RemoteAddress'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Module'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionTV'])" />
|
2014-02-07 16:47:56 +00:00
|
|
|
<parameter name="Challenge" required="false">
|
2014-02-06 21:24:32 +00:00
|
|
|
<para>The challenge that was sent.</para>
|
|
|
|
|
</parameter>
|
2014-02-07 16:47:56 +00:00
|
|
|
<parameter name="ReceivedChallenge" required="false">
|
2014-02-06 21:24:32 +00:00
|
|
|
<para>The challenge that was received.</para>
|
|
|
|
|
</parameter>
|
2017-12-20 17:14:54 +00:00
|
|
|
<parameter name="ReceivedHash" required="false">
|
2014-02-06 21:24:32 +00:00
|
|
|
<para>The hash that was received.</para>
|
|
|
|
|
</parameter>
|
|
|
|
|
</syntax>
|
|
|
|
|
</managerEventInstance>
|
|
|
|
|
</managerEvent>
|
|
|
|
|
<managerEvent language="en_US" name="ChallengeSent">
|
|
|
|
|
<managerEventInstance class="EVENT_FLAG_SECURITY">
|
|
|
|
|
<synopsis>Raised when an Asterisk service sends an authentication challenge to a request.</synopsis>
|
|
|
|
|
<syntax>
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventTV'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Severity'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Service'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventVersion'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='AccountID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='LocalAddress'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='RemoteAddress'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='ChallengeResponseFailed']/managerEventInstance/syntax/parameter[@name='Challenge'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Module'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionTV'])" />
|
|
|
|
|
</syntax>
|
|
|
|
|
</managerEventInstance>
|
|
|
|
|
</managerEvent>
|
|
|
|
|
<managerEvent language="en_US" name="InvalidTransport">
|
|
|
|
|
<managerEventInstance class="EVENT_FLAG_SECURITY">
|
|
|
|
|
<synopsis>Raised when a request attempts to use a transport not allowed by the Asterisk service.</synopsis>
|
|
|
|
|
<syntax>
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventTV'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Severity'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Service'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='EventVersion'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='AccountID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionID'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='LocalAddress'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='RemoteAddress'])" />
|
|
|
|
|
<parameter name="AttemptedTransport">
|
|
|
|
|
<para>The transport type that the request attempted to use.</para>
|
|
|
|
|
</parameter>
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='Module'])" />
|
|
|
|
|
<xi:include xpointer="xpointer(/docs/managerEvent[@name='FailedACL']/managerEventInstance/syntax/parameter[@name='SessionTV'])" />
|
|
|
|
|
</syntax>
|
|
|
|
|
</managerEventInstance>
|
|
|
|
|
</managerEvent>
|
|
|
|
|
***/
|
|
|
|
|
|
2009-07-11 19:15:03 +00:00
|
|
|
#include "asterisk.h"
|
|
|
|
|
|
|
|
|
|
#include "asterisk/utils.h"
|
|
|
|
|
#include "asterisk/strings.h"
|
|
|
|
|
#include "asterisk/network.h"
|
2013-12-19 20:48:19 +00:00
|
|
|
#include "asterisk/event.h"
|
2009-07-11 19:15:03 +00:00
|
|
|
#include "asterisk/security_events.h"
|
2012-04-16 21:20:50 +00:00
|
|
|
#include "asterisk/netsock2.h"
|
2013-05-17 17:36:10 +00:00
|
|
|
#include "asterisk/stasis.h"
|
|
|
|
|
#include "asterisk/json.h"
|
|
|
|
|
#include "asterisk/astobj2.h"
|
2009-07-11 19:15:03 +00:00
|
|
|
|
2013-11-08 19:33:48 +00:00
|
|
|
static const size_t SECURITY_EVENT_BUF_INIT_LEN = 256;
|
2009-07-11 19:15:03 +00:00
|
|
|
|
2013-05-17 17:36:10 +00:00
|
|
|
/*! \brief Security Topic */
|
|
|
|
|
static struct stasis_topic *security_topic;
|
|
|
|
|
|
|
|
|
|
struct stasis_topic *ast_security_topic(void)
|
|
|
|
|
{
|
|
|
|
|
return security_topic;
|
|
|
|
|
}
|
|
|
|
|
|
2013-11-08 19:33:48 +00:00
|
|
|
static int append_event_str_single(struct ast_str **str, struct ast_json *json,
|
|
|
|
|
const enum ast_event_ie_type ie_type)
|
|
|
|
|
{
|
|
|
|
|
const char *ie_type_key = ast_event_get_ie_type_name(ie_type);
|
|
|
|
|
struct ast_json *json_string = ast_json_object_get(json, ie_type_key);
|
|
|
|
|
|
2014-02-07 20:17:50 +00:00
|
|
|
if (!json_string) {
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
2013-11-08 19:33:48 +00:00
|
|
|
|
2014-02-06 21:24:32 +00:00
|
|
|
if (ast_str_append(str, 0, "%s: %s\r\n", ie_type_key, S_OR(ast_json_string_get(json_string), "")) == -1) {
|
2013-11-08 19:33:48 +00:00
|
|
|
return -1;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
static int append_event_str_from_json(struct ast_str **str, struct ast_json *json,
|
|
|
|
|
const struct ast_security_event_ie_type *ies)
|
|
|
|
|
{
|
|
|
|
|
unsigned int i;
|
|
|
|
|
|
2014-02-06 21:24:32 +00:00
|
|
|
if (!ies) {
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
2013-11-08 19:33:48 +00:00
|
|
|
for (i = 0; ies[i].ie_type != AST_EVENT_IE_END; i++) {
|
|
|
|
|
if (append_event_str_single(str, json, ies[i].ie_type)) {
|
|
|
|
|
return -1;
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
static struct ast_manager_event_blob *security_event_to_ami_blob(struct ast_json *json)
|
|
|
|
|
{
|
|
|
|
|
RAII_VAR(struct ast_str *, str, NULL, ast_free);
|
|
|
|
|
struct ast_json *event_type_json;
|
|
|
|
|
enum ast_security_event_type event_type;
|
|
|
|
|
|
|
|
|
|
event_type_json = ast_json_object_get(json, "SecurityEvent");
|
|
|
|
|
event_type = ast_json_integer_get(event_type_json);
|
|
|
|
|
|
2015-04-23 13:00:42 +00:00
|
|
|
ast_assert((unsigned int)event_type < AST_SECURITY_EVENT_NUM_TYPES);
|
2013-11-08 19:33:48 +00:00
|
|
|
|
|
|
|
|
if (!(str = ast_str_create(SECURITY_EVENT_BUF_INIT_LEN))) {
|
|
|
|
|
return NULL;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if (append_event_str_from_json(&str, json,
|
|
|
|
|
ast_security_event_get_required_ies(event_type))) {
|
2014-02-06 21:24:32 +00:00
|
|
|
ast_log(AST_LOG_ERROR, "Failed to issue a security event to AMI: "
|
|
|
|
|
"error occurred when adding required event fields.\n");
|
|
|
|
|
return NULL;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if (append_event_str_from_json(&str, json,
|
|
|
|
|
ast_security_event_get_optional_ies(event_type))) {
|
|
|
|
|
ast_log(AST_LOG_ERROR, "Failed to issue a security event to AMI: "
|
|
|
|
|
"error occurred when adding optional event fields.\n");
|
2013-11-08 19:33:48 +00:00
|
|
|
return NULL;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return ast_manager_event_blob_create(EVENT_FLAG_SECURITY,
|
|
|
|
|
ast_security_event_get_name(event_type),
|
|
|
|
|
"%s",
|
|
|
|
|
ast_str_buffer(str));
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
static struct ast_manager_event_blob *security_event_to_ami(struct stasis_message *message)
|
|
|
|
|
{
|
|
|
|
|
struct ast_json_payload *payload = stasis_message_data(message);
|
|
|
|
|
|
|
|
|
|
if (stasis_message_type(message) != ast_security_event_type()) {
|
|
|
|
|
return NULL;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if (!payload) {
|
|
|
|
|
return NULL;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return security_event_to_ami_blob(payload->json);
|
|
|
|
|
}
|
|
|
|
|
|
2013-05-17 17:36:10 +00:00
|
|
|
/*! \brief Message type for security events */
|
2013-11-08 19:33:48 +00:00
|
|
|
STASIS_MESSAGE_TYPE_DEFN(ast_security_event_type,
|
|
|
|
|
.to_ami = security_event_to_ami,
|
|
|
|
|
);
|
2013-05-17 17:36:10 +00:00
|
|
|
|
Avoid unnecessary cleanups during immediate shutdown
This patch addresses issues during immediate shutdowns, where modules
are not unloaded, but Asterisk atexit handlers are run.
In the typical case, this usually isn't a big deal. But the
introduction of the Stasis message bus makes it much more likely for
asynchronous activity to be happening off in some thread during
shutdown.
During an immediate shutdown, Asterisk skips unloading modules. But
while it is processing the atexit handlers, there is a window of time
where some of the core message types have been cleaned up, but the
message bus is still running. Specifically, it's still running
module subscriptions that might be using the core message types. If a
message is received by that subscription in that window, it will
attempt to use a message type that has been cleaned up.
To solve this problem, this patch introduces ast_register_cleanup().
This function operates identically to ast_register_atexit(), except
that cleanup calls are not invoked on an immediate shutdown. All of
the core message type and topic cleanup was moved from atexit handlers
to cleanup handlers.
This ensures that core type and topic cleanup only happens if the
modules that used them are first unloaded.
This patch also changes the ast_assert() when accessing a cleaned up
or uninitialized message type to an error log message. Message type
functions are actually NULL safe across the board, so the assert was a
bit heavy handed. Especially for anyone with DO_CRASH enabled.
Review: https://reviewboard.asterisk.org/r/2562/
git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@390122 65c4cc65-6c06-0410-ace0-fbb531ad65f3
2013-05-30 17:05:53 +00:00
|
|
|
static void security_stasis_cleanup(void)
|
|
|
|
|
{
|
|
|
|
|
ao2_cleanup(security_topic);
|
|
|
|
|
security_topic = NULL;
|
|
|
|
|
|
|
|
|
|
STASIS_MESSAGE_TYPE_CLEANUP(ast_security_event_type);
|
|
|
|
|
}
|
|
|
|
|
|
2013-05-17 17:36:10 +00:00
|
|
|
int ast_security_stasis_init(void)
|
|
|
|
|
{
|
Avoid unnecessary cleanups during immediate shutdown
This patch addresses issues during immediate shutdowns, where modules
are not unloaded, but Asterisk atexit handlers are run.
In the typical case, this usually isn't a big deal. But the
introduction of the Stasis message bus makes it much more likely for
asynchronous activity to be happening off in some thread during
shutdown.
During an immediate shutdown, Asterisk skips unloading modules. But
while it is processing the atexit handlers, there is a window of time
where some of the core message types have been cleaned up, but the
message bus is still running. Specifically, it's still running
module subscriptions that might be using the core message types. If a
message is received by that subscription in that window, it will
attempt to use a message type that has been cleaned up.
To solve this problem, this patch introduces ast_register_cleanup().
This function operates identically to ast_register_atexit(), except
that cleanup calls are not invoked on an immediate shutdown. All of
the core message type and topic cleanup was moved from atexit handlers
to cleanup handlers.
This ensures that core type and topic cleanup only happens if the
modules that used them are first unloaded.
This patch also changes the ast_assert() when accessing a cleaned up
or uninitialized message type to an error log message. Message type
functions are actually NULL safe across the board, so the assert was a
bit heavy handed. Especially for anyone with DO_CRASH enabled.
Review: https://reviewboard.asterisk.org/r/2562/
git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@390122 65c4cc65-6c06-0410-ace0-fbb531ad65f3
2013-05-30 17:05:53 +00:00
|
|
|
ast_register_cleanup(security_stasis_cleanup);
|
|
|
|
|
|
2019-03-07 12:28:31 +00:00
|
|
|
security_topic = stasis_topic_create("security:all");
|
2013-05-17 17:36:10 +00:00
|
|
|
if (!security_topic) {
|
|
|
|
|
return -1;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if (STASIS_MESSAGE_TYPE_INIT(ast_security_event_type)) {
|
|
|
|
|
return -1;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
2009-07-11 19:15:03 +00:00
|
|
|
static const struct {
|
|
|
|
|
const char *name;
|
|
|
|
|
uint32_t version;
|
|
|
|
|
enum ast_security_event_severity severity;
|
|
|
|
|
#define MAX_SECURITY_IES 12
|
|
|
|
|
struct ast_security_event_ie_type required_ies[MAX_SECURITY_IES];
|
|
|
|
|
struct ast_security_event_ie_type optional_ies[MAX_SECURITY_IES];
|
|
|
|
|
#undef MAX_SECURITY_IES
|
|
|
|
|
} sec_events[AST_SECURITY_EVENT_NUM_TYPES] = {
|
|
|
|
|
|
|
|
|
|
#define SEC_EVT_FIELD(e, field) (offsetof(struct ast_security_event_##e, field))
|
|
|
|
|
|
|
|
|
|
[AST_SECURITY_EVENT_FAILED_ACL] = {
|
|
|
|
|
.name = "FailedACL",
|
|
|
|
|
.version = AST_SECURITY_EVENT_FAILED_ACL_VERSION,
|
|
|
|
|
.severity = AST_SECURITY_EVENT_SEVERITY_ERROR,
|
|
|
|
|
.required_ies = {
|
|
|
|
|
{ AST_EVENT_IE_EVENT_TV, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SEVERITY, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SERVICE, SEC_EVT_FIELD(common, service) },
|
|
|
|
|
{ AST_EVENT_IE_EVENT_VERSION, SEC_EVT_FIELD(common, version) },
|
|
|
|
|
{ AST_EVENT_IE_ACCOUNT_ID, SEC_EVT_FIELD(common, account_id) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_ID, SEC_EVT_FIELD(common, session_id) },
|
|
|
|
|
{ AST_EVENT_IE_LOCAL_ADDR, SEC_EVT_FIELD(common, local_addr) },
|
|
|
|
|
{ AST_EVENT_IE_REMOTE_ADDR, SEC_EVT_FIELD(common, remote_addr) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
.optional_ies = {
|
|
|
|
|
{ AST_EVENT_IE_MODULE, SEC_EVT_FIELD(common, module) },
|
|
|
|
|
{ AST_EVENT_IE_ACL_NAME, SEC_EVT_FIELD(failed_acl, acl_name) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_TV, SEC_EVT_FIELD(common, session_tv) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
},
|
|
|
|
|
|
|
|
|
|
[AST_SECURITY_EVENT_INVAL_ACCT_ID] = {
|
|
|
|
|
.name = "InvalidAccountID",
|
|
|
|
|
.version = AST_SECURITY_EVENT_INVAL_ACCT_ID_VERSION,
|
|
|
|
|
.severity = AST_SECURITY_EVENT_SEVERITY_ERROR,
|
|
|
|
|
.required_ies = {
|
|
|
|
|
{ AST_EVENT_IE_EVENT_TV, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SEVERITY, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SERVICE, SEC_EVT_FIELD(common, service) },
|
|
|
|
|
{ AST_EVENT_IE_EVENT_VERSION, SEC_EVT_FIELD(common, version) },
|
|
|
|
|
{ AST_EVENT_IE_ACCOUNT_ID, SEC_EVT_FIELD(common, account_id) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_ID, SEC_EVT_FIELD(common, session_id) },
|
|
|
|
|
{ AST_EVENT_IE_LOCAL_ADDR, SEC_EVT_FIELD(common, local_addr) },
|
|
|
|
|
{ AST_EVENT_IE_REMOTE_ADDR, SEC_EVT_FIELD(common, remote_addr) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
.optional_ies = {
|
|
|
|
|
{ AST_EVENT_IE_MODULE, SEC_EVT_FIELD(common, module) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_TV, SEC_EVT_FIELD(common, session_tv) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
},
|
|
|
|
|
|
|
|
|
|
[AST_SECURITY_EVENT_SESSION_LIMIT] = {
|
|
|
|
|
.name = "SessionLimit",
|
|
|
|
|
.version = AST_SECURITY_EVENT_SESSION_LIMIT_VERSION,
|
|
|
|
|
.severity = AST_SECURITY_EVENT_SEVERITY_ERROR,
|
|
|
|
|
.required_ies = {
|
|
|
|
|
{ AST_EVENT_IE_EVENT_TV, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SEVERITY, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SERVICE, SEC_EVT_FIELD(common, service) },
|
|
|
|
|
{ AST_EVENT_IE_EVENT_VERSION, SEC_EVT_FIELD(common, version) },
|
|
|
|
|
{ AST_EVENT_IE_ACCOUNT_ID, SEC_EVT_FIELD(common, account_id) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_ID, SEC_EVT_FIELD(common, session_id) },
|
|
|
|
|
{ AST_EVENT_IE_LOCAL_ADDR, SEC_EVT_FIELD(common, local_addr) },
|
|
|
|
|
{ AST_EVENT_IE_REMOTE_ADDR, SEC_EVT_FIELD(common, remote_addr) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
.optional_ies = {
|
|
|
|
|
{ AST_EVENT_IE_MODULE, SEC_EVT_FIELD(common, module) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_TV, SEC_EVT_FIELD(common, session_tv) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
},
|
|
|
|
|
|
|
|
|
|
[AST_SECURITY_EVENT_MEM_LIMIT] = {
|
|
|
|
|
.name = "MemoryLimit",
|
|
|
|
|
.version = AST_SECURITY_EVENT_MEM_LIMIT_VERSION,
|
|
|
|
|
.severity = AST_SECURITY_EVENT_SEVERITY_ERROR,
|
|
|
|
|
.required_ies = {
|
|
|
|
|
{ AST_EVENT_IE_EVENT_TV, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SEVERITY, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SERVICE, SEC_EVT_FIELD(common, service) },
|
|
|
|
|
{ AST_EVENT_IE_EVENT_VERSION, SEC_EVT_FIELD(common, version) },
|
|
|
|
|
{ AST_EVENT_IE_ACCOUNT_ID, SEC_EVT_FIELD(common, account_id) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_ID, SEC_EVT_FIELD(common, session_id) },
|
|
|
|
|
{ AST_EVENT_IE_LOCAL_ADDR, SEC_EVT_FIELD(common, local_addr) },
|
|
|
|
|
{ AST_EVENT_IE_REMOTE_ADDR, SEC_EVT_FIELD(common, remote_addr) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
.optional_ies = {
|
|
|
|
|
{ AST_EVENT_IE_MODULE, SEC_EVT_FIELD(common, module) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_TV, SEC_EVT_FIELD(common, session_tv) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
},
|
|
|
|
|
|
|
|
|
|
[AST_SECURITY_EVENT_LOAD_AVG] = {
|
|
|
|
|
.name = "LoadAverageLimit",
|
|
|
|
|
.version = AST_SECURITY_EVENT_LOAD_AVG_VERSION,
|
|
|
|
|
.severity = AST_SECURITY_EVENT_SEVERITY_ERROR,
|
|
|
|
|
.required_ies = {
|
|
|
|
|
{ AST_EVENT_IE_EVENT_TV, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SEVERITY, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SERVICE, SEC_EVT_FIELD(common, service) },
|
|
|
|
|
{ AST_EVENT_IE_EVENT_VERSION, SEC_EVT_FIELD(common, version) },
|
|
|
|
|
{ AST_EVENT_IE_ACCOUNT_ID, SEC_EVT_FIELD(common, account_id) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_ID, SEC_EVT_FIELD(common, session_id) },
|
|
|
|
|
{ AST_EVENT_IE_LOCAL_ADDR, SEC_EVT_FIELD(common, local_addr) },
|
|
|
|
|
{ AST_EVENT_IE_REMOTE_ADDR, SEC_EVT_FIELD(common, remote_addr) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
.optional_ies = {
|
|
|
|
|
{ AST_EVENT_IE_MODULE, SEC_EVT_FIELD(common, module) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_TV, SEC_EVT_FIELD(common, session_tv) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
},
|
|
|
|
|
|
|
|
|
|
[AST_SECURITY_EVENT_REQ_NO_SUPPORT] = {
|
|
|
|
|
.name = "RequestNotSupported",
|
|
|
|
|
.version = AST_SECURITY_EVENT_REQ_NO_SUPPORT_VERSION,
|
|
|
|
|
.severity = AST_SECURITY_EVENT_SEVERITY_ERROR,
|
|
|
|
|
.required_ies = {
|
|
|
|
|
{ AST_EVENT_IE_EVENT_TV, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SEVERITY, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SERVICE, SEC_EVT_FIELD(common, service) },
|
|
|
|
|
{ AST_EVENT_IE_EVENT_VERSION, SEC_EVT_FIELD(common, version) },
|
|
|
|
|
{ AST_EVENT_IE_ACCOUNT_ID, SEC_EVT_FIELD(common, account_id) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_ID, SEC_EVT_FIELD(common, session_id) },
|
|
|
|
|
{ AST_EVENT_IE_LOCAL_ADDR, SEC_EVT_FIELD(common, local_addr) },
|
|
|
|
|
{ AST_EVENT_IE_REMOTE_ADDR, SEC_EVT_FIELD(common, remote_addr) },
|
|
|
|
|
{ AST_EVENT_IE_REQUEST_TYPE, SEC_EVT_FIELD(req_no_support, request_type) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
.optional_ies = {
|
|
|
|
|
{ AST_EVENT_IE_MODULE, SEC_EVT_FIELD(common, module) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_TV, SEC_EVT_FIELD(common, session_tv) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
},
|
|
|
|
|
|
|
|
|
|
[AST_SECURITY_EVENT_REQ_NOT_ALLOWED] = {
|
|
|
|
|
.name = "RequestNotAllowed",
|
|
|
|
|
.version = AST_SECURITY_EVENT_REQ_NOT_ALLOWED_VERSION,
|
|
|
|
|
.severity = AST_SECURITY_EVENT_SEVERITY_ERROR,
|
|
|
|
|
.required_ies = {
|
|
|
|
|
{ AST_EVENT_IE_EVENT_TV, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SEVERITY, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SERVICE, SEC_EVT_FIELD(common, service) },
|
|
|
|
|
{ AST_EVENT_IE_EVENT_VERSION, SEC_EVT_FIELD(common, version) },
|
|
|
|
|
{ AST_EVENT_IE_ACCOUNT_ID, SEC_EVT_FIELD(common, account_id) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_ID, SEC_EVT_FIELD(common, session_id) },
|
|
|
|
|
{ AST_EVENT_IE_LOCAL_ADDR, SEC_EVT_FIELD(common, local_addr) },
|
|
|
|
|
{ AST_EVENT_IE_REMOTE_ADDR, SEC_EVT_FIELD(common, remote_addr) },
|
|
|
|
|
{ AST_EVENT_IE_REQUEST_TYPE, SEC_EVT_FIELD(req_not_allowed, request_type) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
.optional_ies = {
|
|
|
|
|
{ AST_EVENT_IE_MODULE, SEC_EVT_FIELD(common, module) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_TV, SEC_EVT_FIELD(common, session_tv) },
|
|
|
|
|
{ AST_EVENT_IE_REQUEST_PARAMS, SEC_EVT_FIELD(req_not_allowed, request_params) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
},
|
|
|
|
|
|
|
|
|
|
[AST_SECURITY_EVENT_AUTH_METHOD_NOT_ALLOWED] = {
|
|
|
|
|
.name = "AuthMethodNotAllowed",
|
|
|
|
|
.version = AST_SECURITY_EVENT_AUTH_METHOD_NOT_ALLOWED_VERSION,
|
|
|
|
|
.severity = AST_SECURITY_EVENT_SEVERITY_ERROR,
|
|
|
|
|
.required_ies = {
|
|
|
|
|
{ AST_EVENT_IE_EVENT_TV, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SEVERITY, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SERVICE, SEC_EVT_FIELD(common, service) },
|
|
|
|
|
{ AST_EVENT_IE_EVENT_VERSION, SEC_EVT_FIELD(common, version) },
|
|
|
|
|
{ AST_EVENT_IE_ACCOUNT_ID, SEC_EVT_FIELD(common, account_id) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_ID, SEC_EVT_FIELD(common, session_id) },
|
|
|
|
|
{ AST_EVENT_IE_LOCAL_ADDR, SEC_EVT_FIELD(common, local_addr) },
|
|
|
|
|
{ AST_EVENT_IE_REMOTE_ADDR, SEC_EVT_FIELD(common, remote_addr) },
|
|
|
|
|
{ AST_EVENT_IE_AUTH_METHOD, SEC_EVT_FIELD(auth_method_not_allowed, auth_method) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
.optional_ies = {
|
|
|
|
|
{ AST_EVENT_IE_MODULE, SEC_EVT_FIELD(common, module) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_TV, SEC_EVT_FIELD(common, session_tv) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
},
|
|
|
|
|
|
|
|
|
|
[AST_SECURITY_EVENT_REQ_BAD_FORMAT] = {
|
|
|
|
|
.name = "RequestBadFormat",
|
|
|
|
|
.version = AST_SECURITY_EVENT_REQ_BAD_FORMAT_VERSION,
|
|
|
|
|
.severity = AST_SECURITY_EVENT_SEVERITY_ERROR,
|
|
|
|
|
.required_ies = {
|
|
|
|
|
{ AST_EVENT_IE_EVENT_TV, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SEVERITY, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SERVICE, SEC_EVT_FIELD(common, service) },
|
|
|
|
|
{ AST_EVENT_IE_EVENT_VERSION, SEC_EVT_FIELD(common, version) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_ID, SEC_EVT_FIELD(common, session_id) },
|
|
|
|
|
{ AST_EVENT_IE_LOCAL_ADDR, SEC_EVT_FIELD(common, local_addr) },
|
|
|
|
|
{ AST_EVENT_IE_REMOTE_ADDR, SEC_EVT_FIELD(common, remote_addr) },
|
|
|
|
|
{ AST_EVENT_IE_REQUEST_TYPE, SEC_EVT_FIELD(req_bad_format, request_type) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
.optional_ies = {
|
|
|
|
|
{ AST_EVENT_IE_MODULE, SEC_EVT_FIELD(common, module) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_TV, SEC_EVT_FIELD(common, session_tv) },
|
|
|
|
|
{ AST_EVENT_IE_ACCOUNT_ID, SEC_EVT_FIELD(common, account_id) },
|
|
|
|
|
{ AST_EVENT_IE_REQUEST_PARAMS, SEC_EVT_FIELD(req_bad_format, request_params) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
},
|
|
|
|
|
|
|
|
|
|
[AST_SECURITY_EVENT_SUCCESSFUL_AUTH] = {
|
|
|
|
|
.name = "SuccessfulAuth",
|
|
|
|
|
.version = AST_SECURITY_EVENT_SUCCESSFUL_AUTH_VERSION,
|
|
|
|
|
.severity = AST_SECURITY_EVENT_SEVERITY_INFO,
|
|
|
|
|
.required_ies = {
|
|
|
|
|
{ AST_EVENT_IE_EVENT_TV, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SEVERITY, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SERVICE, SEC_EVT_FIELD(common, service) },
|
|
|
|
|
{ AST_EVENT_IE_EVENT_VERSION, SEC_EVT_FIELD(common, version) },
|
|
|
|
|
{ AST_EVENT_IE_ACCOUNT_ID, SEC_EVT_FIELD(common, account_id) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_ID, SEC_EVT_FIELD(common, session_id) },
|
|
|
|
|
{ AST_EVENT_IE_LOCAL_ADDR, SEC_EVT_FIELD(common, local_addr) },
|
|
|
|
|
{ AST_EVENT_IE_REMOTE_ADDR, SEC_EVT_FIELD(common, remote_addr) },
|
2011-09-22 16:35:20 +00:00
|
|
|
{ AST_EVENT_IE_USING_PASSWORD, SEC_EVT_FIELD(successful_auth, using_password) },
|
2009-07-11 19:15:03 +00:00
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
.optional_ies = {
|
|
|
|
|
{ AST_EVENT_IE_MODULE, SEC_EVT_FIELD(common, module) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_TV, SEC_EVT_FIELD(common, session_tv) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
},
|
|
|
|
|
|
|
|
|
|
[AST_SECURITY_EVENT_UNEXPECTED_ADDR] = {
|
|
|
|
|
.name = "UnexpectedAddress",
|
|
|
|
|
.version = AST_SECURITY_EVENT_UNEXPECTED_ADDR_VERSION,
|
|
|
|
|
.severity = AST_SECURITY_EVENT_SEVERITY_ERROR,
|
|
|
|
|
.required_ies = {
|
|
|
|
|
{ AST_EVENT_IE_EVENT_TV, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SEVERITY, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SERVICE, SEC_EVT_FIELD(common, service) },
|
|
|
|
|
{ AST_EVENT_IE_EVENT_VERSION, SEC_EVT_FIELD(common, version) },
|
|
|
|
|
{ AST_EVENT_IE_ACCOUNT_ID, SEC_EVT_FIELD(common, account_id) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_ID, SEC_EVT_FIELD(common, session_id) },
|
|
|
|
|
{ AST_EVENT_IE_LOCAL_ADDR, SEC_EVT_FIELD(common, local_addr) },
|
|
|
|
|
{ AST_EVENT_IE_REMOTE_ADDR, SEC_EVT_FIELD(common, remote_addr) },
|
|
|
|
|
{ AST_EVENT_IE_EXPECTED_ADDR, SEC_EVT_FIELD(unexpected_addr, expected_addr) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
.optional_ies = {
|
|
|
|
|
{ AST_EVENT_IE_MODULE, SEC_EVT_FIELD(common, module) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_TV, SEC_EVT_FIELD(common, session_tv) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
},
|
|
|
|
|
|
|
|
|
|
[AST_SECURITY_EVENT_CHAL_RESP_FAILED] = {
|
|
|
|
|
.name = "ChallengeResponseFailed",
|
|
|
|
|
.version = AST_SECURITY_EVENT_CHAL_RESP_FAILED_VERSION,
|
|
|
|
|
.severity = AST_SECURITY_EVENT_SEVERITY_ERROR,
|
|
|
|
|
.required_ies = {
|
|
|
|
|
{ AST_EVENT_IE_EVENT_TV, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SEVERITY, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SERVICE, SEC_EVT_FIELD(common, service) },
|
|
|
|
|
{ AST_EVENT_IE_EVENT_VERSION, SEC_EVT_FIELD(common, version) },
|
|
|
|
|
{ AST_EVENT_IE_ACCOUNT_ID, SEC_EVT_FIELD(common, account_id) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_ID, SEC_EVT_FIELD(common, session_id) },
|
|
|
|
|
{ AST_EVENT_IE_LOCAL_ADDR, SEC_EVT_FIELD(common, local_addr) },
|
|
|
|
|
{ AST_EVENT_IE_REMOTE_ADDR, SEC_EVT_FIELD(common, remote_addr) },
|
|
|
|
|
{ AST_EVENT_IE_CHALLENGE, SEC_EVT_FIELD(chal_resp_failed, challenge) },
|
|
|
|
|
{ AST_EVENT_IE_RESPONSE, SEC_EVT_FIELD(chal_resp_failed, response) },
|
|
|
|
|
{ AST_EVENT_IE_EXPECTED_RESPONSE, SEC_EVT_FIELD(chal_resp_failed, expected_response) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
.optional_ies = {
|
|
|
|
|
{ AST_EVENT_IE_MODULE, SEC_EVT_FIELD(common, module) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_TV, SEC_EVT_FIELD(common, session_tv) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
},
|
|
|
|
|
|
|
|
|
|
[AST_SECURITY_EVENT_INVAL_PASSWORD] = {
|
|
|
|
|
.name = "InvalidPassword",
|
|
|
|
|
.version = AST_SECURITY_EVENT_INVAL_PASSWORD_VERSION,
|
|
|
|
|
.severity = AST_SECURITY_EVENT_SEVERITY_ERROR,
|
|
|
|
|
.required_ies = {
|
|
|
|
|
{ AST_EVENT_IE_EVENT_TV, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SEVERITY, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SERVICE, SEC_EVT_FIELD(common, service) },
|
|
|
|
|
{ AST_EVENT_IE_EVENT_VERSION, SEC_EVT_FIELD(common, version) },
|
|
|
|
|
{ AST_EVENT_IE_ACCOUNT_ID, SEC_EVT_FIELD(common, account_id) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_ID, SEC_EVT_FIELD(common, session_id) },
|
|
|
|
|
{ AST_EVENT_IE_LOCAL_ADDR, SEC_EVT_FIELD(common, local_addr) },
|
|
|
|
|
{ AST_EVENT_IE_REMOTE_ADDR, SEC_EVT_FIELD(common, remote_addr) },
|
2011-09-22 16:35:20 +00:00
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
.optional_ies = {
|
|
|
|
|
{ AST_EVENT_IE_MODULE, SEC_EVT_FIELD(common, module) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_TV, SEC_EVT_FIELD(common, session_tv) },
|
2013-10-03 19:30:33 +00:00
|
|
|
{ AST_EVENT_IE_CHALLENGE, SEC_EVT_FIELD(inval_password, challenge) },
|
|
|
|
|
{ AST_EVENT_IE_RECEIVED_CHALLENGE, SEC_EVT_FIELD(inval_password, received_challenge) },
|
|
|
|
|
{ AST_EVENT_IE_RECEIVED_HASH, SEC_EVT_FIELD(inval_password, received_hash) },
|
2011-09-22 16:35:20 +00:00
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
},
|
|
|
|
|
|
|
|
|
|
[AST_SECURITY_EVENT_CHAL_SENT] = {
|
|
|
|
|
.name = "ChallengeSent",
|
|
|
|
|
.version = AST_SECURITY_EVENT_CHAL_SENT_VERSION,
|
|
|
|
|
.severity = AST_SECURITY_EVENT_SEVERITY_INFO,
|
|
|
|
|
.required_ies = {
|
|
|
|
|
{ AST_EVENT_IE_EVENT_TV, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SEVERITY, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SERVICE, SEC_EVT_FIELD(common, service) },
|
|
|
|
|
{ AST_EVENT_IE_EVENT_VERSION, SEC_EVT_FIELD(common, version) },
|
|
|
|
|
{ AST_EVENT_IE_ACCOUNT_ID, SEC_EVT_FIELD(common, account_id) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_ID, SEC_EVT_FIELD(common, session_id) },
|
|
|
|
|
{ AST_EVENT_IE_LOCAL_ADDR, SEC_EVT_FIELD(common, local_addr) },
|
|
|
|
|
{ AST_EVENT_IE_REMOTE_ADDR, SEC_EVT_FIELD(common, remote_addr) },
|
|
|
|
|
{ AST_EVENT_IE_CHALLENGE, SEC_EVT_FIELD(chal_sent, challenge) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
.optional_ies = {
|
|
|
|
|
{ AST_EVENT_IE_MODULE, SEC_EVT_FIELD(common, module) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_TV, SEC_EVT_FIELD(common, session_tv) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
},
|
|
|
|
|
|
|
|
|
|
[AST_SECURITY_EVENT_INVAL_TRANSPORT] = {
|
|
|
|
|
.name = "InvalidTransport",
|
|
|
|
|
.version = AST_SECURITY_EVENT_INVAL_TRANSPORT_VERSION,
|
|
|
|
|
.severity = AST_SECURITY_EVENT_SEVERITY_ERROR,
|
|
|
|
|
.required_ies = {
|
|
|
|
|
{ AST_EVENT_IE_EVENT_TV, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SEVERITY, 0 },
|
|
|
|
|
{ AST_EVENT_IE_SERVICE, SEC_EVT_FIELD(common, service) },
|
|
|
|
|
{ AST_EVENT_IE_EVENT_VERSION, SEC_EVT_FIELD(common, version) },
|
|
|
|
|
{ AST_EVENT_IE_ACCOUNT_ID, SEC_EVT_FIELD(common, account_id) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_ID, SEC_EVT_FIELD(common, session_id) },
|
|
|
|
|
{ AST_EVENT_IE_LOCAL_ADDR, SEC_EVT_FIELD(common, local_addr) },
|
|
|
|
|
{ AST_EVENT_IE_REMOTE_ADDR, SEC_EVT_FIELD(common, remote_addr) },
|
|
|
|
|
{ AST_EVENT_IE_ATTEMPTED_TRANSPORT, SEC_EVT_FIELD(inval_transport, transport) },
|
2009-07-11 19:15:03 +00:00
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
.optional_ies = {
|
|
|
|
|
{ AST_EVENT_IE_MODULE, SEC_EVT_FIELD(common, module) },
|
|
|
|
|
{ AST_EVENT_IE_SESSION_TV, SEC_EVT_FIELD(common, session_tv) },
|
|
|
|
|
{ AST_EVENT_IE_END, 0 }
|
|
|
|
|
},
|
|
|
|
|
},
|
|
|
|
|
|
|
|
|
|
#undef SEC_EVT_FIELD
|
|
|
|
|
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
static const struct {
|
|
|
|
|
enum ast_security_event_severity severity;
|
|
|
|
|
const char *str;
|
|
|
|
|
} severities[] = {
|
|
|
|
|
{ AST_SECURITY_EVENT_SEVERITY_INFO, "Informational" },
|
|
|
|
|
{ AST_SECURITY_EVENT_SEVERITY_ERROR, "Error" },
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
const char *ast_security_event_severity_get_name(
|
|
|
|
|
const enum ast_security_event_severity severity)
|
|
|
|
|
{
|
|
|
|
|
unsigned int i;
|
|
|
|
|
|
|
|
|
|
for (i = 0; i < ARRAY_LEN(severities); i++) {
|
|
|
|
|
if (severities[i].severity == severity) {
|
|
|
|
|
return severities[i].str;
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return NULL;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
static int check_event_type(const enum ast_security_event_type event_type)
|
|
|
|
|
{
|
2015-04-23 13:00:42 +00:00
|
|
|
if ((unsigned int)event_type >= AST_SECURITY_EVENT_NUM_TYPES) {
|
2009-07-11 19:15:03 +00:00
|
|
|
ast_log(LOG_ERROR, "Invalid security event type %u\n", event_type);
|
|
|
|
|
return -1;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
const char *ast_security_event_get_name(const enum ast_security_event_type event_type)
|
|
|
|
|
{
|
|
|
|
|
if (check_event_type(event_type)) {
|
|
|
|
|
return NULL;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return sec_events[event_type].name;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
const struct ast_security_event_ie_type *ast_security_event_get_required_ies(
|
|
|
|
|
const enum ast_security_event_type event_type)
|
|
|
|
|
{
|
|
|
|
|
if (check_event_type(event_type)) {
|
|
|
|
|
return NULL;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return sec_events[event_type].required_ies;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
const struct ast_security_event_ie_type *ast_security_event_get_optional_ies(
|
|
|
|
|
const enum ast_security_event_type event_type)
|
|
|
|
|
{
|
|
|
|
|
if (check_event_type(event_type)) {
|
|
|
|
|
return NULL;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return sec_events[event_type].optional_ies;
|
|
|
|
|
}
|
|
|
|
|
|
2013-05-17 17:36:10 +00:00
|
|
|
static int add_ip_json_object(struct ast_json *json, enum ast_event_ie_type ie_type,
|
2012-04-16 21:20:50 +00:00
|
|
|
const struct ast_security_event_ip_addr *addr)
|
2009-07-11 19:15:03 +00:00
|
|
|
{
|
2013-05-17 17:36:10 +00:00
|
|
|
struct ast_json *json_ip;
|
2009-07-11 19:15:03 +00:00
|
|
|
|
2013-05-17 17:36:10 +00:00
|
|
|
json_ip = ast_json_ipaddr(addr->addr, addr->transport);
|
|
|
|
|
if (!json_ip) {
|
|
|
|
|
return -1;
|
2009-07-11 19:15:03 +00:00
|
|
|
}
|
|
|
|
|
|
2013-05-17 17:36:10 +00:00
|
|
|
return ast_json_object_set(json, ast_event_get_ie_type_name(ie_type), json_ip);
|
2009-07-11 19:15:03 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
enum ie_required {
|
|
|
|
|
NOT_REQUIRED,
|
|
|
|
|
REQUIRED
|
|
|
|
|
};
|
|
|
|
|
|
2013-05-17 17:36:10 +00:00
|
|
|
static int add_json_object(struct ast_json *json, const struct ast_security_event_common *sec,
|
2009-07-11 19:15:03 +00:00
|
|
|
const struct ast_security_event_ie_type *ie_type, enum ie_required req)
|
|
|
|
|
{
|
|
|
|
|
int res = 0;
|
|
|
|
|
|
|
|
|
|
switch (ie_type->ie_type) {
|
|
|
|
|
case AST_EVENT_IE_SERVICE:
|
|
|
|
|
case AST_EVENT_IE_ACCOUNT_ID:
|
|
|
|
|
case AST_EVENT_IE_SESSION_ID:
|
|
|
|
|
case AST_EVENT_IE_MODULE:
|
|
|
|
|
case AST_EVENT_IE_ACL_NAME:
|
|
|
|
|
case AST_EVENT_IE_REQUEST_TYPE:
|
|
|
|
|
case AST_EVENT_IE_REQUEST_PARAMS:
|
|
|
|
|
case AST_EVENT_IE_AUTH_METHOD:
|
|
|
|
|
case AST_EVENT_IE_CHALLENGE:
|
|
|
|
|
case AST_EVENT_IE_RESPONSE:
|
|
|
|
|
case AST_EVENT_IE_EXPECTED_RESPONSE:
|
2011-09-22 16:35:20 +00:00
|
|
|
case AST_EVENT_IE_RECEIVED_CHALLENGE:
|
|
|
|
|
case AST_EVENT_IE_RECEIVED_HASH:
|
|
|
|
|
case AST_EVENT_IE_ATTEMPTED_TRANSPORT:
|
2009-07-11 19:15:03 +00:00
|
|
|
{
|
|
|
|
|
const char *str;
|
2013-05-17 17:36:10 +00:00
|
|
|
struct ast_json *json_string;
|
2009-07-11 19:15:03 +00:00
|
|
|
|
|
|
|
|
str = *((const char **)(((const char *) sec) + ie_type->offset));
|
|
|
|
|
|
|
|
|
|
if (req && !str) {
|
2013-12-19 20:48:19 +00:00
|
|
|
ast_log(LOG_WARNING, "Required IE '%d' (%s) for security event "
|
2014-05-09 22:49:26 +00:00
|
|
|
"type '%u' (%s) not present\n", ie_type->ie_type,
|
2013-12-19 20:48:19 +00:00
|
|
|
ast_event_get_ie_type_name(ie_type->ie_type),
|
|
|
|
|
sec->event_type, ast_security_event_get_name(sec->event_type));
|
2009-07-11 19:15:03 +00:00
|
|
|
res = -1;
|
2013-05-17 17:36:10 +00:00
|
|
|
break;
|
2009-07-11 19:15:03 +00:00
|
|
|
}
|
|
|
|
|
|
2013-05-17 17:36:10 +00:00
|
|
|
if (!str) {
|
|
|
|
|
break;
|
2009-07-11 19:15:03 +00:00
|
|
|
}
|
|
|
|
|
|
2013-05-17 17:36:10 +00:00
|
|
|
json_string = ast_json_string_create(str);
|
|
|
|
|
if (!json_string) {
|
|
|
|
|
res = -1;
|
|
|
|
|
break;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
res = ast_json_object_set(json, ast_event_get_ie_type_name(ie_type->ie_type), json_string);
|
2009-07-11 19:15:03 +00:00
|
|
|
break;
|
|
|
|
|
}
|
|
|
|
|
case AST_EVENT_IE_EVENT_VERSION:
|
2011-09-22 16:35:20 +00:00
|
|
|
case AST_EVENT_IE_USING_PASSWORD:
|
2009-07-11 19:15:03 +00:00
|
|
|
{
|
2013-05-17 17:36:10 +00:00
|
|
|
struct ast_json *json_string;
|
2009-07-11 19:15:03 +00:00
|
|
|
uint32_t val;
|
|
|
|
|
val = *((const uint32_t *)(((const char *) sec) + ie_type->offset));
|
2013-05-17 17:36:10 +00:00
|
|
|
|
2014-05-09 22:49:26 +00:00
|
|
|
json_string = ast_json_stringf("%u", val);
|
2013-05-17 17:36:10 +00:00
|
|
|
if (!json_string) {
|
|
|
|
|
res = -1;
|
|
|
|
|
break;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
res = ast_json_object_set(json, ast_event_get_ie_type_name(ie_type->ie_type), json_string);
|
2009-07-11 19:15:03 +00:00
|
|
|
break;
|
|
|
|
|
}
|
|
|
|
|
case AST_EVENT_IE_LOCAL_ADDR:
|
|
|
|
|
case AST_EVENT_IE_REMOTE_ADDR:
|
|
|
|
|
case AST_EVENT_IE_EXPECTED_ADDR:
|
|
|
|
|
{
|
2012-04-16 21:20:50 +00:00
|
|
|
const struct ast_security_event_ip_addr *addr;
|
2009-07-11 19:15:03 +00:00
|
|
|
|
2012-04-16 21:20:50 +00:00
|
|
|
addr = (const struct ast_security_event_ip_addr *)(((const char *) sec) + ie_type->offset);
|
2009-07-11 19:15:03 +00:00
|
|
|
|
2012-04-16 21:20:50 +00:00
|
|
|
if (req && !addr->addr) {
|
2013-12-19 20:48:19 +00:00
|
|
|
ast_log(LOG_WARNING, "Required IE '%d' (%s) for security event "
|
2014-05-09 22:49:26 +00:00
|
|
|
"type '%u' (%s) not present\n", ie_type->ie_type,
|
2013-12-19 20:48:19 +00:00
|
|
|
ast_event_get_ie_type_name(ie_type->ie_type),
|
|
|
|
|
sec->event_type, ast_security_event_get_name(sec->event_type));
|
2009-07-11 19:15:03 +00:00
|
|
|
res = -1;
|
|
|
|
|
}
|
|
|
|
|
|
2012-04-16 21:20:50 +00:00
|
|
|
if (addr->addr) {
|
2013-05-17 17:36:10 +00:00
|
|
|
res = add_ip_json_object(json, ie_type->ie_type, addr);
|
2009-07-11 19:15:03 +00:00
|
|
|
}
|
2013-05-17 17:36:10 +00:00
|
|
|
|
2009-07-11 19:15:03 +00:00
|
|
|
break;
|
|
|
|
|
}
|
|
|
|
|
case AST_EVENT_IE_SESSION_TV:
|
|
|
|
|
{
|
|
|
|
|
const struct timeval *tval;
|
|
|
|
|
|
|
|
|
|
tval = *((const struct timeval **)(((const char *) sec) + ie_type->offset));
|
|
|
|
|
|
|
|
|
|
if (req && !tval) {
|
2013-12-19 20:48:19 +00:00
|
|
|
ast_log(LOG_WARNING, "Required IE '%d' (%s) for security event "
|
2014-05-09 22:49:26 +00:00
|
|
|
"type '%u' (%s) not present\n", ie_type->ie_type,
|
2013-12-19 20:48:19 +00:00
|
|
|
ast_event_get_ie_type_name(ie_type->ie_type),
|
|
|
|
|
sec->event_type, ast_security_event_get_name(sec->event_type));
|
2009-07-11 19:15:03 +00:00
|
|
|
res = -1;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if (tval) {
|
2013-05-17 17:36:10 +00:00
|
|
|
struct ast_json *json_tval = ast_json_timeval(*tval, NULL);
|
|
|
|
|
if (!json_tval) {
|
|
|
|
|
res = -1;
|
|
|
|
|
break;
|
|
|
|
|
}
|
|
|
|
|
res = ast_json_object_set(json, ast_event_get_ie_type_name(ie_type->ie_type), json_tval);
|
2009-07-11 19:15:03 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
break;
|
|
|
|
|
}
|
|
|
|
|
case AST_EVENT_IE_EVENT_TV:
|
|
|
|
|
case AST_EVENT_IE_SEVERITY:
|
|
|
|
|
/* Added automatically, nothing to do here. */
|
|
|
|
|
break;
|
|
|
|
|
default:
|
2013-12-19 20:48:19 +00:00
|
|
|
ast_log(LOG_WARNING, "Unhandled IE type '%d' (%s), this security event "
|
|
|
|
|
"will be missing data.\n", ie_type->ie_type,
|
|
|
|
|
ast_event_get_ie_type_name(ie_type->ie_type));
|
2009-07-11 19:15:03 +00:00
|
|
|
break;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return res;
|
|
|
|
|
}
|
|
|
|
|
|
2013-05-17 17:36:10 +00:00
|
|
|
static struct ast_json *alloc_security_event_json_object(const struct ast_security_event_common *sec)
|
|
|
|
|
{
|
|
|
|
|
struct timeval tv = ast_tvnow();
|
|
|
|
|
const char *severity_str;
|
|
|
|
|
struct ast_json *json_temp;
|
|
|
|
|
RAII_VAR(struct ast_json *, json_object, ast_json_object_create(), ast_json_unref);
|
|
|
|
|
|
|
|
|
|
if (!json_object) {
|
|
|
|
|
return NULL;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/* NOTE: Every time ast_json_object_set is used, json_temp becomes a stale pointer since the reference is taken.
|
|
|
|
|
* This is true even if ast_json_object_set fails.
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
json_temp = ast_json_integer_create(sec->event_type);
|
2013-08-17 14:39:27 +00:00
|
|
|
if (!json_temp || ast_json_object_set(json_object, "SecurityEvent", json_temp)) {
|
2013-05-17 17:36:10 +00:00
|
|
|
return NULL;
|
|
|
|
|
}
|
|
|
|
|
|
2014-05-09 22:49:26 +00:00
|
|
|
json_temp = ast_json_stringf("%u", sec->version);
|
2013-05-17 17:36:10 +00:00
|
|
|
if (!json_temp || ast_json_object_set(json_object, ast_event_get_ie_type_name(AST_EVENT_IE_EVENT_VERSION), json_temp)) {
|
|
|
|
|
return NULL;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/* AST_EVENT_IE_EVENT_TV */
|
|
|
|
|
json_temp = ast_json_timeval(tv, NULL);
|
|
|
|
|
if (!json_temp || ast_json_object_set(json_object, ast_event_get_ie_type_name(AST_EVENT_IE_EVENT_TV), json_temp)) {
|
|
|
|
|
return NULL;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/* AST_EVENT_IE_SERVICE */
|
|
|
|
|
json_temp = ast_json_string_create(sec->service);
|
|
|
|
|
if (!json_temp || ast_json_object_set(json_object, ast_event_get_ie_type_name(AST_EVENT_IE_SERVICE), json_temp)) {
|
|
|
|
|
return NULL;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/* AST_EVENT_IE_SEVERITY */
|
|
|
|
|
severity_str = S_OR(
|
|
|
|
|
ast_security_event_severity_get_name(sec_events[sec->event_type].severity),
|
|
|
|
|
"Unknown"
|
|
|
|
|
);
|
|
|
|
|
|
|
|
|
|
json_temp = ast_json_string_create(severity_str);
|
|
|
|
|
if (!json_temp || ast_json_object_set(json_object, ast_event_get_ie_type_name(AST_EVENT_IE_SEVERITY), json_temp)) {
|
|
|
|
|
return NULL;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return ast_json_ref(json_object);
|
|
|
|
|
}
|
|
|
|
|
|
2009-07-11 19:15:03 +00:00
|
|
|
static int handle_security_event(const struct ast_security_event_common *sec)
|
|
|
|
|
{
|
2013-05-17 17:36:10 +00:00
|
|
|
RAII_VAR(struct stasis_message *, msg, NULL, ao2_cleanup);
|
|
|
|
|
RAII_VAR(struct ast_json_payload *, json_payload, NULL, ao2_cleanup);
|
|
|
|
|
RAII_VAR(struct ast_json *, json_object, NULL, ast_json_unref);
|
|
|
|
|
|
2009-07-11 19:15:03 +00:00
|
|
|
const struct ast_security_event_ie_type *ies;
|
|
|
|
|
unsigned int i;
|
|
|
|
|
|
2014-08-06 12:55:28 +00:00
|
|
|
if (!ast_security_event_type()) {
|
|
|
|
|
return -1;
|
|
|
|
|
}
|
2013-05-17 17:36:10 +00:00
|
|
|
|
2014-08-06 12:55:28 +00:00
|
|
|
json_object = alloc_security_event_json_object(sec);
|
2013-05-17 17:36:10 +00:00
|
|
|
if (!json_object) {
|
2009-07-11 19:15:03 +00:00
|
|
|
return -1;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
for (ies = ast_security_event_get_required_ies(sec->event_type), i = 0;
|
|
|
|
|
ies[i].ie_type != AST_EVENT_IE_END;
|
|
|
|
|
i++) {
|
2013-05-17 17:36:10 +00:00
|
|
|
if (add_json_object(json_object, sec, ies + i, REQUIRED)) {
|
2009-07-11 19:15:03 +00:00
|
|
|
goto return_error;
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
for (ies = ast_security_event_get_optional_ies(sec->event_type), i = 0;
|
|
|
|
|
ies[i].ie_type != AST_EVENT_IE_END;
|
|
|
|
|
i++) {
|
2013-05-17 17:36:10 +00:00
|
|
|
if (add_json_object(json_object, sec, ies + i, NOT_REQUIRED)) {
|
2009-07-11 19:15:03 +00:00
|
|
|
goto return_error;
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
2013-05-17 17:36:10 +00:00
|
|
|
/* The json blob is ready. Throw it in the payload and send it out over stasis. */
|
|
|
|
|
if (!(json_payload = ast_json_payload_create(json_object))) {
|
|
|
|
|
goto return_error;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
msg = stasis_message_create(ast_security_event_type(), json_payload);
|
2009-07-11 19:15:03 +00:00
|
|
|
|
2013-05-17 17:36:10 +00:00
|
|
|
if (!msg) {
|
2009-07-11 19:15:03 +00:00
|
|
|
goto return_error;
|
|
|
|
|
}
|
|
|
|
|
|
2013-05-17 17:36:10 +00:00
|
|
|
stasis_publish(ast_security_topic(), msg);
|
|
|
|
|
|
2009-07-11 19:15:03 +00:00
|
|
|
return 0;
|
|
|
|
|
|
|
|
|
|
return_error:
|
|
|
|
|
return -1;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
int ast_security_event_report(const struct ast_security_event_common *sec)
|
|
|
|
|
{
|
2015-04-23 13:00:42 +00:00
|
|
|
if ((unsigned int)sec->event_type >= AST_SECURITY_EVENT_NUM_TYPES) {
|
2009-07-11 19:15:03 +00:00
|
|
|
ast_log(LOG_ERROR, "Invalid security event type\n");
|
|
|
|
|
return -1;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if (!sec_events[sec->event_type].name) {
|
|
|
|
|
ast_log(LOG_WARNING, "Security event type %u not handled\n",
|
|
|
|
|
sec->event_type);
|
|
|
|
|
return -1;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if (sec->version != sec_events[sec->event_type].version) {
|
|
|
|
|
ast_log(LOG_WARNING, "Security event %u version mismatch\n",
|
|
|
|
|
sec->event_type);
|
|
|
|
|
return -1;
|
|
|
|
|
}
|
|
|
|
|
|
2013-05-17 17:36:10 +00:00
|
|
|
if (handle_security_event(sec)) {
|
|
|
|
|
ast_log(LOG_ERROR, "Failed to issue security event of type %s.\n",
|
|
|
|
|
ast_security_event_get_name(sec->event_type));
|
|
|
|
|
}
|
2009-07-11 19:15:03 +00:00
|
|
|
|
2013-05-17 17:36:10 +00:00
|
|
|
return 0;
|
2009-07-11 19:15:03 +00:00
|
|
|
}
|
