审计事件表
下表包含了在整个 CPython 运行时和标准库中由 sys.audit() 或 PySys_Audit() 调用所引发的全部事件。 这些调用是在 3.8 或更高版本中添加的 (参见 PEP 578)。
请参阅 sys.addaudithook() 和 PySys_AddAuditHook() 了解有关处理这些事件的详细信息。
CPython 实现细节: 此表是根据 CPython 文档生成的,可能无法表示其他实现所引发的事件。 请参阅你的运行时专属的文档了解实际引发的事件。
Audit event | Arguments | References |
---|---|---|
thread.startnewthread |
| |
array.new |
| |
builtins.breakpoint |
| |
builtins.id |
| |
builtins.input |
| |
builtins.input/result |
| |
code.new |
| |
compile |
| |
cpython.PyInterpreterStateClear | ||
cpython.PyInterpreterStateNew | ||
cpython.PySysClearAuditHooks | ||
cpython.runcommand |
| |
cpython.runfile |
| |
cpython.runinteractivehook |
| |
cpython.runmodule |
| |
cpython.runstartup |
| |
cpython.runstdin | ||
ctypes.addressof |
| |
ctypes.callfunction |
| |
ctypes.cdata |
| |
ctypes.cdata/buffer |
| |
ctypes.createstringbuffer |
| |
ctypes.createunicode_buffer |
| |
ctypes.dlopen |
| |
ctypes.dlsym |
| |
ctypes.dlsym/handle |
| |
ctypes.get_errno | ||
ctypes.get_last_error | ||
ctypes.set_errno |
| |
ctypes.set_exception |
| |
ctypes.set_last_error |
| |
ctypes.string_at |
| |
ctypes.wstring_at |
| |
ensurepip.bootstrap |
| |
exec |
| |
fcntl.fcntl |
| |
fcntl.flock |
| |
fcntl.ioctl |
| |
fcntl.lockf |
| |
ftplib.connect |
| |
ftplib.sendcmd |
| |
function.__new |
| |
gc.get_objects |
| |
gc.get_referents |
| |
gc.get_referrers |
| |
glob.glob |
| |
glob.glob/2 |
| |
http.client.connect |
| |
http.client.send |
| |
imaplib.open |
| |
imaplib.send |
| |
import |
| |
marshal.dumps |
| |
marshal.load | ||
marshal.loads |
| |
mmap.__new |
| |
msvcrt.get_osfhandle |
| |
msvcrt.locking |
| |
msvcrt.open_osfhandle |
| |
object.__delattr |
| <a class=”reference internal” href=”$b52009dde28810d7.md#object.__delattr“>[1] |
object.__getattr |
| <a class=”reference internal” href=”$b52009dde28810d7.md#object.__getattribute“>[1] |
object.__setattr |
| <a class=”reference internal” href=”$b52009dde28810d7.md#object.__setattr“>[1] |
open |
| |
os.add_dll_directory |
| |
os.chdir |
| |
os.chflags |
| |
os.chmod |
| |
os.chown |
| |
os.exec |
| |
os.fork | ||
os.forkpty | ||
os.fwalk |
| |
os.getxattr |
| |
os.kill |
| |
os.killpg |
| |
os.link |
| |
os.listdir |
| |
os.listdrives | ||
os.listmounts |
| |
os.listvolumes | ||
os.listxattr |
| |
os.lockf |
| |
os.mkdir |
| |
os.posix_spawn |
| |
os.putenv |
| |
os.remove |
| |
os.removexattr |
| |
os.rename |
| |
os.rmdir |
| |
os.scandir |
| |
os.setxattr |
| |
os.spawn |
| |
os.startfile |
| |
os.startfile/2 |
| |
os.symlink |
| |
os.system |
| |
os.truncate |
| |
os.unsetenv |
| |
os.utime |
| |
os.walk |
| |
pathlib.Path.glob |
| |
pathlib.Path.rglob |
| |
pdb.Pdb | ||
pickle.find_class |
| |
poplib.connect |
| |
poplib.putline |
| |
pty.spawn |
| |
resource.prlimit |
| |
resource.setrlimit |
| |
setopencodehook | ||
shutil.chown |
| |
shutil.copyfile |
| |
shutil.copymode |
| |
shutil.copystat |
| |
shutil.copytree |
| |
shutil.make_archive |
| |
shutil.move |
| |
shutil.rmtree |
| |
shutil.unpack_archive |
| |
signal.pthread_kill |
| |
smtplib.connect |
| |
smtplib.send |
| |
socket.__new |
| |
socket.bind |
| |
socket.connect |
| |
socket.getaddrinfo |
| |
socket.gethostbyaddr |
| |
socket.gethostbyname |
| |
socket.gethostname | ||
socket.getnameinfo |
| |
socket.getservbyname |
| |
socket.getservbyport |
| |
socket.sendmsg |
| |
socket.sendto |
| |
socket.sethostname |
| |
sqlite3.connect |
| |
sqlite3.connect/handle |
| |
sqlite3.enable_load_extension |
| |
sqlite3.load_extension |
| |
subprocess.Popen |
| |
sys._current_exceptions | ||
sys._current_frames | ||
sys._getframe |
| |
sys._getframemodulename |
| |
sys.addaudithook | ||
sys.excepthook |
| |
sys.set_asyncgen_hooks_finalizer | ||
sys.set_asyncgen_hooks_firstiter | ||
sys.setprofile | ||
sys.settrace | ||
sys.unraisablehook |
| |
syslog.closelog | ||
syslog.openlog |
| |
syslog.setlogmask |
| |
syslog.syslog |
| |
tempfile.mkdtemp |
| |
tempfile.mkstemp |
| |
time.sleep |
| |
urllib.Request |
| |
webbrowser.open |
| |
winreg.ConnectRegistry |
| |
winreg.CreateKey |
| |
winreg.DeleteKey |
| |
winreg.DeleteValue |
| |
winreg.DisableReflectionKey |
| |
winreg.EnableReflectionKey |
| |
winreg.EnumKey |
| |
winreg.EnumValue |
| |
winreg.ExpandEnvironmentStrings |
| |
winreg.LoadKey |
| |
winreg.OpenKey |
| |
winreg.OpenKey/result |
| |
winreg.PyHKEY.Detach |
| |
winreg.QueryInfoKey |
| |
winreg.QueryReflectionKey |
| |
winreg.QueryValue |
| |
winreg.SaveKey |
| |
winreg.SetValue |
|
下列事件只在内部被引发,而不会回应任何 CPython 公共 API:
审计事件 | 实参 |
---|---|
_winapi.CreateFile |
|
_winapi.CreateJunction |
|
_winapi.CreateNamedPipe |
|
_winapi.CreatePipe | |
_winapi.CreateProcess |
|
_winapi.OpenProcess |
|
_winapi.TerminateProcess |
|
ctypes.PyObj_FromPtr |
|