1# Copyright (c) 2022 Huawei Device Co., Ltd. 2# Licensed under the Apache License, Version 2.0 (the "License"); 3# you may not use this file except in compliance with the License. 4# You may obtain a copy of the License at 5# 6# http://www.apache.org/licenses/LICENSE-2.0 7# 8# Unless required by applicable law or agreed to in writing, software 9# distributed under the License is distributed on an "AS IS" BASIS, 10# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 11# See the License for the specific language governing permissions and 12# limitations under the License. 13 14domain: SECURITY_GUARD 15 16OBTAIN_DATA: 17 __BASE: {type: STATISTIC, level: CRITICAL, desc: obtain detailed data} 18 CALLER_PID: {type: INT32, desc: caller pid} 19 CALL_TIME: {type: STRING, desc: call time} 20 EVENT_SIZE: {type: INT32, desc: event size} 21 22RISK_ANALYSIS: 23 __BASE: {type: STATISTIC, level: CRITICAL, desc: obtain device risk status} 24 CALLER_PID: {type: INT32, desc: caller pid} 25 CALL_TIME: {type: STRING, desc: call time} 26 EVENT_INFO: {type: STRING, desc: event info} 27 RISK_STATUS: {type: STRING, desc: risk status} 28 29SG_EVENT_SUBSCRIBE: 30 __BASE: {type: STATISTIC, level: CRITICAL, desc: security guard event subscribe data} 31 CALLER_PID: {type: INT32, desc: caller pid} 32 CALL_TIME: {type: STRING, desc: call time} 33 EVENT_ID: {type: INT64, desc: event id} 34 SUB_RET: {type: INT32, desc: subsecribe result} 35 36SG_EVENT_UNSUBSCRIBE: 37 __BASE: {type: STATISTIC, level: CRITICAL, desc: security guard event unsubscribe data} 38 CALLER_PID: {type: INT32, desc: caller pid} 39 CALL_TIME: {type: STRING, desc: call time} 40 UNSUB_RET: {type: INT32, desc: unsubsecribe result} 41 42SC_EVENT_SUBSCRIBE: 43 __BASE: {type: STATISTIC, level: CRITICAL, desc: security collect event subscribe data} 44 CALLER_PID: {type: INT32, desc: caller pid} 45 EVENT_VERSION: {type: STRING, desc: event version} 46 EVENT_ID: {type: INT64, desc: event id} 47 SUB_RET: {type: INT32, desc: subsecribe result} 48 49SC_EVENT_UNSUBSCRIBE: 50 __BASE: {type: STATISTIC, level: CRITICAL, desc: security collect event unsubscribe data} 51 CALLER_PID: {type: INT32, desc: caller pid} 52 UNSUB_RET: {type: INT32, desc: unsubsecribe result} 53 54SG_UPDATE_CONFIG: 55 __BASE: {type: STATISTIC, level: CRITICAL, desc: security config update event} 56 CONFIG_PATH: {type: STRING, desc: config path} 57 CALL_TIME: {type: STRING, desc: call time} 58 RET: {type: INT32, desc: update result}