此表包含的所有事件的引发通过
sys.audit()
or
PySys_Audit()
calls throughout the CPython runtime and the standard library. These calls were added in 3.8.0 or later.
见
sys.addaudithook()
and
PySys_AddAuditHook()
了解处理这些事件的有关信息。
CPython 实现细节: 此表生成自 CPython 文档编制,且不能表示由其它实现引发的事件。见特定运行时文档编制,了解引发的实际事件。
| 审计事件 | 自变量 | 参考 |
|---|---|---|
| array.__new__ |
typecode
,
initializer
|
[1] |
| builtins.breakpoint |
breakpointhook
|
[1] |
| builtins.id |
id
|
[1] |
| builtins.input |
prompt
|
[1] |
| builtins.input/result |
result
|
[1] |
| code.__new__ |
code
,
filename
,
name
,
argcount
,
posonlyargcount
,
kwonlyargcount
,
nlocals
,
stacksize
,
flags
|
[1] |
| compile |
source
,
filename
|
[1] |
| cpython.PyInterpreterState_Clear | [1] | |
| cpython.PyInterpreterState_New | [1] | |
| cpython._PySys_ClearAuditHooks | [1] | |
| cpython.run_command |
command
|
[1] |
| cpython.run_file |
filename
|
[1] |
| cpython.run_interactivehook |
hook
|
[1] |
| cpython.run_module |
module-name
|
[1] |
| cpython.run_startup |
filename
|
[1] |
| cpython.run_stdin | [1] | |
| ctypes.addressof |
obj
|
[1] |
| ctypes.call_function |
func_pointer
,
arguments
|
[1] |
| ctypes.cdata |
address
|
[1] |
| ctypes.cdata/buffer |
pointer
,
size
,
offset
|
[1] [2] |
| ctypes.create_string_buffer |
init
,
size
|
[1] |
| ctypes.create_unicode_buffer |
init
,
size
|
[1] |
| ctypes.dlopen |
name
|
[1] |
| ctypes.dlsym |
library
,
name
|
[1] |
| ctypes.dlsym/handle |
handle
,
name
|
[1] |
| ctypes.get_errno | [1] | |
| ctypes.get_last_error | [1] | |
| ctypes.seh_exception |
code
|
[1] |
| ctypes.set_errno |
errno
|
[1] |
| ctypes.set_last_error |
error
|
[1] |
| ctypes.string_at |
address
,
size
|
[1] |
| ctypes.wstring_at |
address
,
size
|
[1] |
| ensurepip.bootstrap |
root
|
[1] |
| exec |
code_object
|
[1] [2] |
| fcntl.fcntl |
fd
,
cmd
,
arg
|
[1] |
| fcntl.flock |
fd
,
operation
|
[1] |
| fcntl.ioctl |
fd
,
request
,
arg
|
[1] |
| fcntl.lockf |
fd
,
cmd
,
len
,
start
,
whence
|
[1] |
| ftplib.connect |
self
,
host
,
port
|
[1] |
| ftplib.sendcmd |
self
,
cmd
|
[1] [2] |
| function.__new__ |
code
|
[1] |
| gc.get_objects |
generation
|
[1] |
| gc.get_referents |
objs
|
[1] |
| gc.get_referrers |
objs
|
[1] |
| glob.glob |
pathname
,
recursive
|
[1] [2] |
| imaplib.open |
self
,
host
,
port
|
[1] |
| imaplib.send |
self
,
data
|
[1] |
| import |
module
,
filename
,
sys.path
,
sys.meta_path
,
sys.path_hooks
|
[1] |
| mmap.__new__ |
fileno
,
length
,
access
,
offset
|
[1] |
| msvcrt.get_osfhandle |
fd
|
[1] |
| msvcrt.locking |
fd
,
mode
,
nbytes
|
[1] |
| msvcrt.open_osfhandle |
handle
,
flags
|
[1] |
| nntplib.connect |
self
,
host
,
port
|
[1] [2] |
| nntplib.putline |
self
,
line
|
[1] [2] |
| object.__delattr__ |
obj
,
name
|
[1] |
| object.__getattr__ |
obj
,
name
|
[1] |
| object.__setattr__ |
obj
,
name
,
value
|
[1] |
| open |
file
,
mode
,
flags
|
[1] [2] [3] |
| os.add_dll_directory |
path
|
[1] |
| os.chdir |
path
|
[1] [2] |
| os.chflags |
path
,
flags
|
[1] [2] |
| os.chmod |
path
,
mode
,
dir_fd
|
[1] [2] [3] |
| os.chown |
path
,
uid
,
gid
,
dir_fd
|
[1] [2] [3] |
| os.exec |
path
,
args
,
env
|
[1] |
| os.fork | [1] | |
| os.forkpty | [1] | |
| os.getxattr |
path
,
attribute
|
[1] |
| os.kill |
pid
,
sig
|
[1] |
| os.killpg |
pgid
,
sig
|
[1] |
| os.link |
src
,
dst
,
src_dir_fd
,
dst_dir_fd
|
[1] |
| os.listdir |
path
|
[1] |
| os.listxattr |
path
|
[1] |
| os.lockf |
fd
,
cmd
,
len
|
[1] |
| os.mkdir |
path
,
mode
,
dir_fd
|
[1] [2] |
| os.posix_spawn |
path
,
argv
,
env
|
[1] [2] |
| os.putenv |
key
,
value
|
[1] |
| os.remove |
path
,
dir_fd
|
[1] [2] [3] |
| os.removexattr |
path
,
attribute
|
[1] |
| os.rename |
src
,
dst
,
src_dir_fd
,
dst_dir_fd
|
[1] [2] [3] |
| os.rmdir |
path
,
dir_fd
|
[1] |
| os.scandir |
path
|
[1] |
| os.setxattr |
path
,
attribute
,
value
,
flags
|
[1] |
| os.spawn |
mode
,
path
,
args
,
env
|
[1] |
| os.startfile |
path
,
operation
|
[1] |
| os.symlink |
src
,
dst
,
dir_fd
|
[1] |
| os.system |
command
|
[1] |
| os.truncate |
fd
,
length
|
[1] [2] |
| os.unsetenv |
key
|
[1] |
| os.utime |
path
,
times
,
ns
,
dir_fd
|
[1] |
| pdb.Pdb | [1] | |
| pickle.find_class |
module
,
name
|
[1] |
| poplib.connect |
self
,
host
,
port
|
[1] [2] |
| poplib.putline |
self
,
line
|
[1] [2] |
| pty.spawn |
argv
|
[1] |
| resource.prlimit |
pid
,
resource
,
limits
|
[1] |
| resource.setrlimit |
resource
,
limits
|
[1] |
| setopencodehook | [1] | |
| shutil.chown |
path
,
user
,
group
|
[1] |
| shutil.copyfile |
src
,
dst
|
[1] [2] [3] |
| shutil.copymode |
src
,
dst
|
[1] [2] |
| shutil.copystat |
src
,
dst
|
[1] [2] |
| shutil.copytree |
src
,
dst
|
[1] |
| shutil.make_archive |
base_name
,
format
,
root_dir
,
base_dir
|
[1] |
| shutil.move |
src
,
dst
|
[1] |
| shutil.rmtree |
path
|
[1] |
| shutil.unpack_archive |
filename
,
extract_dir
,
format
|
[1] |
| signal.pthread_kill |
thread_id
,
signalnum
|
[1] |
| smtplib.connect |
self
,
host
,
port
|
[1] |
| smtplib.send |
self
,
data
|
[1] |
| socket.__new__ |
self
,
family
,
type
,
protocol
|
[1] |
| socket.bind |
self
,
address
|
[1] |
| socket.connect |
self
,
address
|
[1] [2] |
| socket.getaddrinfo |
host
,
port
,
family
,
type
,
protocol
|
[1] |
| socket.gethostbyaddr |
ip_address
|
[1] |
| socket.gethostbyname |
hostname
|
[1] [2] |
| socket.gethostname | [1] | |
| socket.getnameinfo |
sockaddr
|
[1] |
| socket.getservbyname |
servicename
,
protocolname
|
[1] |
| socket.getservbyport |
port
,
protocolname
|
[1] |
| socket.sendmsg |
self
,
address
|
[1] |
| socket.sendto |
self
,
address
|
[1] |
| socket.sethostname |
name
|
[1] |
| sqlite3.connect |
database
|
[1] |
| subprocess.Popen |
executable
,
args
,
cwd
,
env
|
[1] |
| sys._current_frames | [1] | |
| sys._getframe | [1] | |
| sys.addaudithook | [1] [2] | |
| sys.excepthook |
hook
,
type
,
value
,
traceback
|
[1] |
| sys.set_asyncgen_hooks_finalizer | [1] | |
| sys.set_asyncgen_hooks_firstiter | [1] | |
| sys.setprofile | [1] | |
| sys.settrace | [1] | |
| sys.unraisablehook |
hook
,
unraisable
|
[1] |
| syslog.closelog | [1] | |
| syslog.openlog |
ident
,
logoption
,
facility
|
[1] |
| syslog.setlogmask |
maskpri
|
[1] |
| syslog.syslog |
priority
,
message
|
[1] |
| telnetlib.Telnet.open |
self
,
host
,
port
|
[1] |
| telnetlib.Telnet.write |
self
,
buffer
|
[1] |
| tempfile.mkdtemp |
fullpath
|
[1] [2] |
| tempfile.mkstemp |
fullpath
|
[1] [2] [3] |
| urllib.Request |
fullurl
,
data
,
headers
,
method
|
[1] |
| webbrowser.open |
url
|
[1] |
| winreg.ConnectRegistry |
computer_name
,
key
|
[1] |
| winreg.CreateKey |
key
,
sub_key
,
access
|
[1] [2] |
| winreg.DeleteKey |
key
,
sub_key
,
access
|
[1] [2] |
| winreg.DeleteValue |
key
,
value
|
[1] |
| winreg.DisableReflectionKey |
key
|
[1] |
| winreg.EnableReflectionKey |
key
|
[1] |
| winreg.EnumKey |
key
,
index
|
[1] |
| winreg.EnumValue |
key
,
index
|
[1] |
| winreg.ExpandEnvironmentStrings |
str
|
[1] |
| winreg.LoadKey |
key
,
sub_key
,
file_name
|
[1] |
| winreg.OpenKey |
key
,
sub_key
,
access
|
[1] |
| winreg.OpenKey/result |
key
|
[1] [2] [3] |
| winreg.PyHKEY.Detach |
key
|
[1] |
| winreg.QueryInfoKey |
key
|
[1] |
| winreg.QueryReflectionKey |
key
|
[1] |
| winreg.QueryValue |
key
,
sub_key
,
value_name
|
[1] [2] |
| winreg.SaveKey |
key
,
file_name
|
[1] |
| winreg.SetValue |
key
,
sub_key
,
type
,
value
|
[1] [2] |
以下事件在内部引发,且不对应 CPython 的任何公共 API:
| 审计事件 | 自变量 |
|---|---|
| _winapi.CreateFile |
file_name
,
desired_access
,
share_mode
,
creation_disposition
,
flags_and_attributes
|
| _winapi.CreateJunction |
src_path
,
dst_path
|
| _winapi.CreateNamedPipe |
name
,
open_mode
,
pipe_mode
|
| _winapi.CreatePipe | |
| _winapi.CreateProcess |
application_name
,
command_line
,
current_directory
|
| _winapi.OpenProcess |
process_id
,
desired_access
|
| _winapi.TerminateProcess |
handle
,
exit_code
|
| ctypes.PyObj_FromPtr |
obj
|