# EndpointSecurity Constants ## Topics ### Constants [`var ES_ADDRESS_TYPE_IPV4: es_address_type_t`](/documentation/EndpointSecurity/ES_ADDRESS_TYPE_IPV4) [`var ES_ADDRESS_TYPE_IPV6: es_address_type_t`](/documentation/EndpointSecurity/ES_ADDRESS_TYPE_IPV6) [`var ES_ADDRESS_TYPE_NAMED_SOCKET: es_address_type_t`](/documentation/EndpointSecurity/ES_ADDRESS_TYPE_NAMED_SOCKET) [`var ES_ADDRESS_TYPE_NONE: es_address_type_t`](/documentation/EndpointSecurity/ES_ADDRESS_TYPE_NONE) [`var ES_AUTHENTICATION_TYPE_AUTO_UNLOCK: es_authentication_type_t`](/documentation/EndpointSecurity/ES_AUTHENTICATION_TYPE_AUTO_UNLOCK) [`var ES_AUTHENTICATION_TYPE_LAST: es_authentication_type_t`](/documentation/EndpointSecurity/ES_AUTHENTICATION_TYPE_LAST) [`var ES_AUTHENTICATION_TYPE_OD: es_authentication_type_t`](/documentation/EndpointSecurity/ES_AUTHENTICATION_TYPE_OD) [`var ES_AUTHENTICATION_TYPE_TOKEN: es_authentication_type_t`](/documentation/EndpointSecurity/ES_AUTHENTICATION_TYPE_TOKEN) [`var ES_AUTHENTICATION_TYPE_TOUCHID: es_authentication_type_t`](/documentation/EndpointSecurity/ES_AUTHENTICATION_TYPE_TOUCHID) [`var ES_AUTHORIZATION_RULE_CLASS_ALLOW: es_authorization_rule_class_t`](/documentation/EndpointSecurity/ES_AUTHORIZATION_RULE_CLASS_ALLOW) [`var ES_AUTHORIZATION_RULE_CLASS_DENY: es_authorization_rule_class_t`](/documentation/EndpointSecurity/ES_AUTHORIZATION_RULE_CLASS_DENY) [`var ES_AUTHORIZATION_RULE_CLASS_INVALID: es_authorization_rule_class_t`](/documentation/EndpointSecurity/ES_AUTHORIZATION_RULE_CLASS_INVALID) [`var ES_AUTHORIZATION_RULE_CLASS_MECHANISM: es_authorization_rule_class_t`](/documentation/EndpointSecurity/ES_AUTHORIZATION_RULE_CLASS_MECHANISM) [`var ES_AUTHORIZATION_RULE_CLASS_RULE: es_authorization_rule_class_t`](/documentation/EndpointSecurity/ES_AUTHORIZATION_RULE_CLASS_RULE) [`var ES_AUTHORIZATION_RULE_CLASS_UNKNOWN: es_authorization_rule_class_t`](/documentation/EndpointSecurity/ES_AUTHORIZATION_RULE_CLASS_UNKNOWN) [`var ES_AUTHORIZATION_RULE_CLASS_USER: es_authorization_rule_class_t`](/documentation/EndpointSecurity/ES_AUTHORIZATION_RULE_CLASS_USER) [`var ES_AUTO_UNLOCK_AUTH_PROMPT: es_auto_unlock_type_t`](/documentation/EndpointSecurity/ES_AUTO_UNLOCK_AUTH_PROMPT) [`var ES_AUTO_UNLOCK_MACHINE_UNLOCK: es_auto_unlock_type_t`](/documentation/EndpointSecurity/ES_AUTO_UNLOCK_MACHINE_UNLOCK) [`var ES_BTM_ITEM_TYPE_AGENT: es_btm_item_type_t`](/documentation/EndpointSecurity/ES_BTM_ITEM_TYPE_AGENT) [`var ES_BTM_ITEM_TYPE_APP: es_btm_item_type_t`](/documentation/EndpointSecurity/ES_BTM_ITEM_TYPE_APP) [`var ES_BTM_ITEM_TYPE_DAEMON: es_btm_item_type_t`](/documentation/EndpointSecurity/ES_BTM_ITEM_TYPE_DAEMON) [`var ES_BTM_ITEM_TYPE_LOGIN_ITEM: es_btm_item_type_t`](/documentation/EndpointSecurity/ES_BTM_ITEM_TYPE_LOGIN_ITEM) [`var ES_BTM_ITEM_TYPE_USER_ITEM: es_btm_item_type_t`](/documentation/EndpointSecurity/ES_BTM_ITEM_TYPE_USER_ITEM) [`var ES_CLEAR: es_set_or_clear_t`](/documentation/EndpointSecurity/ES_CLEAR) A case that indicates the event represents a clearing of the access control list. [`var ES_EVENT_TYPE_NOTIFY_AUTHENTICATION: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_AUTHENTICATION) [`var ES_EVENT_TYPE_NOTIFY_AUTHORIZATION_JUDGEMENT: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_AUTHORIZATION_JUDGEMENT) [`var ES_EVENT_TYPE_NOTIFY_AUTHORIZATION_PETITION: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_AUTHORIZATION_PETITION) [`var ES_EVENT_TYPE_NOTIFY_BTM_LAUNCH_ITEM_ADD: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_BTM_LAUNCH_ITEM_ADD) [`var ES_EVENT_TYPE_NOTIFY_BTM_LAUNCH_ITEM_REMOVE: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_BTM_LAUNCH_ITEM_REMOVE) [`var ES_EVENT_TYPE_NOTIFY_GATEKEEPER_USER_OVERRIDE: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_GATEKEEPER_USER_OVERRIDE) [`var ES_EVENT_TYPE_NOTIFY_LOGIN_LOGIN: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_LOGIN_LOGIN) [`var ES_EVENT_TYPE_NOTIFY_LOGIN_LOGOUT: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_LOGIN_LOGOUT) [`var ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOCK: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOCK) [`var ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOGIN: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOGIN) [`var ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOGOUT: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOGOUT) [`var ES_EVENT_TYPE_NOTIFY_LW_SESSION_UNLOCK: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_LW_SESSION_UNLOCK) [`var ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_SET: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_SET) [`var ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_VALUE_ADD: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_VALUE_ADD) [`var ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_VALUE_REMOVE: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_VALUE_REMOVE) [`var ES_EVENT_TYPE_NOTIFY_OD_CREATE_GROUP: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_OD_CREATE_GROUP) [`var ES_EVENT_TYPE_NOTIFY_OD_CREATE_USER: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_OD_CREATE_USER) [`var ES_EVENT_TYPE_NOTIFY_OD_DELETE_GROUP: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_OD_DELETE_GROUP) [`var ES_EVENT_TYPE_NOTIFY_OD_DELETE_USER: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_OD_DELETE_USER) [`var ES_EVENT_TYPE_NOTIFY_OD_DISABLE_USER: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_OD_DISABLE_USER) [`var ES_EVENT_TYPE_NOTIFY_OD_ENABLE_USER: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_OD_ENABLE_USER) [`var ES_EVENT_TYPE_NOTIFY_OD_GROUP_ADD: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_OD_GROUP_ADD) [`var ES_EVENT_TYPE_NOTIFY_OD_GROUP_REMOVE: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_OD_GROUP_REMOVE) [`var ES_EVENT_TYPE_NOTIFY_OD_GROUP_SET: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_OD_GROUP_SET) [`var ES_EVENT_TYPE_NOTIFY_OD_MODIFY_PASSWORD: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_OD_MODIFY_PASSWORD) [`var ES_EVENT_TYPE_NOTIFY_OPENSSH_LOGIN: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_OPENSSH_LOGIN) [`var ES_EVENT_TYPE_NOTIFY_OPENSSH_LOGOUT: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_OPENSSH_LOGOUT) [`var ES_EVENT_TYPE_NOTIFY_PROFILE_ADD: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_PROFILE_ADD) [`var ES_EVENT_TYPE_NOTIFY_PROFILE_REMOVE: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_PROFILE_REMOVE) [`var ES_EVENT_TYPE_NOTIFY_SCREENSHARING_ATTACH: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_SCREENSHARING_ATTACH) [`var ES_EVENT_TYPE_NOTIFY_SCREENSHARING_DETACH: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_SCREENSHARING_DETACH) [`var ES_EVENT_TYPE_NOTIFY_SU: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_SU) [`var ES_EVENT_TYPE_NOTIFY_SUDO: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_SUDO) [`var ES_EVENT_TYPE_NOTIFY_XPC_CONNECT: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_XPC_CONNECT) [`var ES_EVENT_TYPE_NOTIFY_XP_MALWARE_DETECTED: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_XP_MALWARE_DETECTED) [`var ES_EVENT_TYPE_NOTIFY_XP_MALWARE_REMEDIATED: es_event_type_t`](/documentation/EndpointSecurity/ES_EVENT_TYPE_NOTIFY_XP_MALWARE_REMEDIATED) [`var ES_GATEKEEPER_USER_OVERRIDE_FILE_TYPE_FILE: es_gatekeeper_user_override_file_type_t`](/documentation/EndpointSecurity/ES_GATEKEEPER_USER_OVERRIDE_FILE_TYPE_FILE) [`var ES_GATEKEEPER_USER_OVERRIDE_FILE_TYPE_PATH: es_gatekeeper_user_override_file_type_t`](/documentation/EndpointSecurity/ES_GATEKEEPER_USER_OVERRIDE_FILE_TYPE_PATH) [`var ES_GET_TASK_TYPE_EXPOSE_TASK: es_get_task_type_t`](/documentation/EndpointSecurity/ES_GET_TASK_TYPE_EXPOSE_TASK) [`var ES_GET_TASK_TYPE_IDENTITY_TOKEN: es_get_task_type_t`](/documentation/EndpointSecurity/ES_GET_TASK_TYPE_IDENTITY_TOKEN) [`var ES_GET_TASK_TYPE_TASK_FOR_PID: es_get_task_type_t`](/documentation/EndpointSecurity/ES_GET_TASK_TYPE_TASK_FOR_PID) [`var ES_MOUNT_DISPOSITION_EXTERNAL: es_mount_disposition_t`](/documentation/EndpointSecurity/ES_MOUNT_DISPOSITION_EXTERNAL) [`var ES_MOUNT_DISPOSITION_INTERNAL: es_mount_disposition_t`](/documentation/EndpointSecurity/ES_MOUNT_DISPOSITION_INTERNAL) [`var ES_MOUNT_DISPOSITION_NETWORK: es_mount_disposition_t`](/documentation/EndpointSecurity/ES_MOUNT_DISPOSITION_NETWORK) [`var ES_MOUNT_DISPOSITION_NULLFS: es_mount_disposition_t`](/documentation/EndpointSecurity/ES_MOUNT_DISPOSITION_NULLFS) [`var ES_MOUNT_DISPOSITION_UNKNOWN: es_mount_disposition_t`](/documentation/EndpointSecurity/ES_MOUNT_DISPOSITION_UNKNOWN) [`var ES_MOUNT_DISPOSITION_VIRTUAL: es_mount_disposition_t`](/documentation/EndpointSecurity/ES_MOUNT_DISPOSITION_VIRTUAL) [`var ES_MUTE_INVERSION_TYPE_LAST: es_mute_inversion_type_t`](/documentation/EndpointSecurity/ES_MUTE_INVERSION_TYPE_LAST) [`var ES_MUTE_INVERSION_TYPE_PATH: es_mute_inversion_type_t`](/documentation/EndpointSecurity/ES_MUTE_INVERSION_TYPE_PATH) [`var ES_MUTE_INVERSION_TYPE_PROCESS: es_mute_inversion_type_t`](/documentation/EndpointSecurity/ES_MUTE_INVERSION_TYPE_PROCESS) [`var ES_MUTE_INVERSION_TYPE_TARGET_PATH: es_mute_inversion_type_t`](/documentation/EndpointSecurity/ES_MUTE_INVERSION_TYPE_TARGET_PATH) [`var ES_MUTE_INVERTED: es_mute_inverted_return_t`](/documentation/EndpointSecurity/ES_MUTE_INVERTED) [`var ES_MUTE_INVERTED_ERROR: es_mute_inverted_return_t`](/documentation/EndpointSecurity/ES_MUTE_INVERTED_ERROR) [`var ES_MUTE_NOT_INVERTED: es_mute_inverted_return_t`](/documentation/EndpointSecurity/ES_MUTE_NOT_INVERTED) [`var ES_MUTE_PATH_TYPE_TARGET_LITERAL: es_mute_path_type_t`](/documentation/EndpointSecurity/ES_MUTE_PATH_TYPE_TARGET_LITERAL) [`var ES_MUTE_PATH_TYPE_TARGET_PREFIX: es_mute_path_type_t`](/documentation/EndpointSecurity/ES_MUTE_PATH_TYPE_TARGET_PREFIX) [`var ES_NEW_CLIENT_RESULT_ERR_INTERNAL: es_new_client_result_t`](/documentation/EndpointSecurity/ES_NEW_CLIENT_RESULT_ERR_INTERNAL) Communication with the Endpoint Security subsystem failed. [`var ES_NEW_CLIENT_RESULT_ERR_INVALID_ARGUMENT: es_new_client_result_t`](/documentation/EndpointSecurity/ES_NEW_CLIENT_RESULT_ERR_INVALID_ARGUMENT) The attempt to create a new client contained one or more invalid arguments. [`var ES_NEW_CLIENT_RESULT_ERR_NOT_ENTITLED: es_new_client_result_t`](/documentation/EndpointSecurity/ES_NEW_CLIENT_RESULT_ERR_NOT_ENTITLED) The caller isn’t properly entitled to connect to Endpoint Security. [`var ES_NEW_CLIENT_RESULT_ERR_NOT_PERMITTED: es_new_client_result_t`](/documentation/EndpointSecurity/ES_NEW_CLIENT_RESULT_ERR_NOT_PERMITTED) The caller isn’t permitted to connect to Endpoint Security. [`var ES_NEW_CLIENT_RESULT_ERR_NOT_PRIVILEGED: es_new_client_result_t`](/documentation/EndpointSecurity/ES_NEW_CLIENT_RESULT_ERR_NOT_PRIVILEGED) The caller isn’t running as root. [`var ES_NEW_CLIENT_RESULT_ERR_TOO_MANY_CLIENTS: es_new_client_result_t`](/documentation/EndpointSecurity/ES_NEW_CLIENT_RESULT_ERR_TOO_MANY_CLIENTS) The caller has reached the maximum allowed number of simultaneously connected clients. [`var ES_NEW_CLIENT_RESULT_SUCCESS: es_new_client_result_t`](/documentation/EndpointSecurity/ES_NEW_CLIENT_RESULT_SUCCESS) Endpoint Security successfully created the new client. [`var ES_OD_ACCOUNT_TYPE_COMPUTER: es_od_account_type_t`](/documentation/EndpointSecurity/ES_OD_ACCOUNT_TYPE_COMPUTER) [`var ES_OD_ACCOUNT_TYPE_USER: es_od_account_type_t`](/documentation/EndpointSecurity/ES_OD_ACCOUNT_TYPE_USER) [`var ES_OD_MEMBER_TYPE_GROUP_UUID: es_od_member_type_t`](/documentation/EndpointSecurity/ES_OD_MEMBER_TYPE_GROUP_UUID) [`var ES_OD_MEMBER_TYPE_USER_NAME: es_od_member_type_t`](/documentation/EndpointSecurity/ES_OD_MEMBER_TYPE_USER_NAME) [`var ES_OD_MEMBER_TYPE_USER_UUID: es_od_member_type_t`](/documentation/EndpointSecurity/ES_OD_MEMBER_TYPE_USER_UUID) [`var ES_OD_RECORD_TYPE_GROUP: es_od_record_type_t`](/documentation/EndpointSecurity/ES_OD_RECORD_TYPE_GROUP) [`var ES_OD_RECORD_TYPE_USER: es_od_record_type_t`](/documentation/EndpointSecurity/ES_OD_RECORD_TYPE_USER) [`var ES_OPENSSH_AUTH_FAIL_GSSAPI: es_openssh_login_result_type_t`](/documentation/EndpointSecurity/ES_OPENSSH_AUTH_FAIL_GSSAPI) [`var ES_OPENSSH_AUTH_FAIL_HOSTBASED: es_openssh_login_result_type_t`](/documentation/EndpointSecurity/ES_OPENSSH_AUTH_FAIL_HOSTBASED) [`var ES_OPENSSH_AUTH_FAIL_KBDINT: es_openssh_login_result_type_t`](/documentation/EndpointSecurity/ES_OPENSSH_AUTH_FAIL_KBDINT) [`var ES_OPENSSH_AUTH_FAIL_NONE: es_openssh_login_result_type_t`](/documentation/EndpointSecurity/ES_OPENSSH_AUTH_FAIL_NONE) [`var ES_OPENSSH_AUTH_FAIL_PASSWD: es_openssh_login_result_type_t`](/documentation/EndpointSecurity/ES_OPENSSH_AUTH_FAIL_PASSWD) [`var ES_OPENSSH_AUTH_FAIL_PUBKEY: es_openssh_login_result_type_t`](/documentation/EndpointSecurity/ES_OPENSSH_AUTH_FAIL_PUBKEY) [`var ES_OPENSSH_AUTH_SUCCESS: es_openssh_login_result_type_t`](/documentation/EndpointSecurity/ES_OPENSSH_AUTH_SUCCESS) [`var ES_OPENSSH_INVALID_USER: es_openssh_login_result_type_t`](/documentation/EndpointSecurity/ES_OPENSSH_INVALID_USER) [`var ES_OPENSSH_LOGIN_EXCEED_MAXTRIES: es_openssh_login_result_type_t`](/documentation/EndpointSecurity/ES_OPENSSH_LOGIN_EXCEED_MAXTRIES) [`var ES_OPENSSH_LOGIN_ROOT_DENIED: es_openssh_login_result_type_t`](/documentation/EndpointSecurity/ES_OPENSSH_LOGIN_ROOT_DENIED) [`var ES_PROC_CHECK_TYPE_DIRTYCONTROL: es_proc_check_type_t`](/documentation/EndpointSecurity/ES_PROC_CHECK_TYPE_DIRTYCONTROL) A type of process check that uses the process’s dirty state. [`var ES_PROC_CHECK_TYPE_KERNMSGBUF: es_proc_check_type_t`](/documentation/EndpointSecurity/ES_PROC_CHECK_TYPE_KERNMSGBUF) A type of process check that checks the message buffer. [`var ES_PROC_CHECK_TYPE_LISTPIDS: es_proc_check_type_t`](/documentation/EndpointSecurity/ES_PROC_CHECK_TYPE_LISTPIDS) A type of process check that lists related process identifiers. [`var ES_PROC_CHECK_TYPE_PIDFDINFO: es_proc_check_type_t`](/documentation/EndpointSecurity/ES_PROC_CHECK_TYPE_PIDFDINFO) A type of process check that gets file descriptor information. [`var ES_PROC_CHECK_TYPE_PIDFILEPORTINFO: es_proc_check_type_t`](/documentation/EndpointSecurity/ES_PROC_CHECK_TYPE_PIDFILEPORTINFO) A type of process check that gets port information. [`var ES_PROC_CHECK_TYPE_PIDINFO: es_proc_check_type_t`](/documentation/EndpointSecurity/ES_PROC_CHECK_TYPE_PIDINFO) A type of process check that gets basic process information. [`var ES_PROC_CHECK_TYPE_PIDRUSAGE: es_proc_check_type_t`](/documentation/EndpointSecurity/ES_PROC_CHECK_TYPE_PIDRUSAGE) A type of process check that gets a process’s resource usage information. [`var ES_PROC_CHECK_TYPE_SETCONTROL: es_proc_check_type_t`](/documentation/EndpointSecurity/ES_PROC_CHECK_TYPE_SETCONTROL) A type of process check that sets the process control state. [`var ES_PROC_CHECK_TYPE_TERMINATE: es_proc_check_type_t`](/documentation/EndpointSecurity/ES_PROC_CHECK_TYPE_TERMINATE) A type of process check that terninates a process. [`var ES_PROC_CHECK_TYPE_UDATA_INFO: es_proc_check_type_t`](/documentation/EndpointSecurity/ES_PROC_CHECK_TYPE_UDATA_INFO) A type of process check that involves a user data token. [`var ES_PROFILE_SOURCE_INSTALL: es_profile_source_t`](/documentation/EndpointSecurity/ES_PROFILE_SOURCE_INSTALL) [`var ES_PROFILE_SOURCE_MANAGED: es_profile_source_t`](/documentation/EndpointSecurity/ES_PROFILE_SOURCE_MANAGED) [`var ES_RETURN_ERROR: es_return_t`](/documentation/EndpointSecurity/ES_RETURN_ERROR) The action failed with an error. [`var ES_RETURN_SUCCESS: es_return_t`](/documentation/EndpointSecurity/ES_RETURN_SUCCESS) The action succeeded. [`var ES_SET: es_set_or_clear_t`](/documentation/EndpointSecurity/ES_SET) A case that indicates the event represents a setting of access control list values. [`var ES_SUDO_PLUGIN_TYPE_APPROVAL: es_sudo_plugin_type_t`](/documentation/EndpointSecurity/ES_SUDO_PLUGIN_TYPE_APPROVAL) [`var ES_SUDO_PLUGIN_TYPE_AUDIT: es_sudo_plugin_type_t`](/documentation/EndpointSecurity/ES_SUDO_PLUGIN_TYPE_AUDIT) [`var ES_SUDO_PLUGIN_TYPE_FRONT_END: es_sudo_plugin_type_t`](/documentation/EndpointSecurity/ES_SUDO_PLUGIN_TYPE_FRONT_END) [`var ES_SUDO_PLUGIN_TYPE_IO: es_sudo_plugin_type_t`](/documentation/EndpointSecurity/ES_SUDO_PLUGIN_TYPE_IO) [`var ES_SUDO_PLUGIN_TYPE_POLICY: es_sudo_plugin_type_t`](/documentation/EndpointSecurity/ES_SUDO_PLUGIN_TYPE_POLICY) [`var ES_SUDO_PLUGIN_TYPE_UNKNOWN: es_sudo_plugin_type_t`](/documentation/EndpointSecurity/ES_SUDO_PLUGIN_TYPE_UNKNOWN) [`var ES_TOUCHID_MODE_IDENTIFICATION: es_touchid_mode_t`](/documentation/EndpointSecurity/ES_TOUCHID_MODE_IDENTIFICATION) [`var ES_TOUCHID_MODE_VERIFICATION: es_touchid_mode_t`](/documentation/EndpointSecurity/ES_TOUCHID_MODE_VERIFICATION) [`var ES_XPC_DOMAIN_TYPE_GUI: es_xpc_domain_type_t`](/documentation/EndpointSecurity/ES_XPC_DOMAIN_TYPE_GUI) [`var ES_XPC_DOMAIN_TYPE_MANAGER: es_xpc_domain_type_t`](/documentation/EndpointSecurity/ES_XPC_DOMAIN_TYPE_MANAGER) [`var ES_XPC_DOMAIN_TYPE_PID: es_xpc_domain_type_t`](/documentation/EndpointSecurity/ES_XPC_DOMAIN_TYPE_PID) [`var ES_XPC_DOMAIN_TYPE_PORT: es_xpc_domain_type_t`](/documentation/EndpointSecurity/ES_XPC_DOMAIN_TYPE_PORT) [`var ES_XPC_DOMAIN_TYPE_SESSION: es_xpc_domain_type_t`](/documentation/EndpointSecurity/ES_XPC_DOMAIN_TYPE_SESSION) [`var ES_XPC_DOMAIN_TYPE_SYSTEM: es_xpc_domain_type_t`](/documentation/EndpointSecurity/ES_XPC_DOMAIN_TYPE_SYSTEM) [`var ES_XPC_DOMAIN_TYPE_USER: es_xpc_domain_type_t`](/documentation/EndpointSecurity/ES_XPC_DOMAIN_TYPE_USER) [`var ES_XPC_DOMAIN_TYPE_USER_LOGIN: es_xpc_domain_type_t`](/documentation/EndpointSecurity/ES_XPC_DOMAIN_TYPE_USER_LOGIN) --- Copyright © 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)