GETAUDIT(2) System Calls GETAUDIT(2)
NAME
getaudit, setaudit, getaudit_addr, setaudit_addr - get or set process
audit information
SYNOPSIS
cc [
flag ... ]
file ...
-lbsm -lsocket -lnsl [
library ... ]
#include <sys/param.h>
#include <bsm/libbsm.h>
int getaudit(
struct auditinfo *info);
int setaudit(
struct auditinfo *info);
int getaudit_addr(
struct auditinfo_addr *info,
int length);
int setaudit_addr(
struct auditinfo_addr *info,
int length);
DESCRIPTION
The
getaudit() function gets the audit
ID, the preselection mask, the
terminal
ID and the audit session
ID for the current process.
The
getaudit() function can fail and return an
E2BIG errno if the
address field in the terminal
ID is larger than 32 bits. In this
case,
getaudit_addr() should be used.
The
setaudit() function sets the audit
ID, the preselection mask, the
terminal
ID and the audit session
ID for the current process.
The
getaudit_addr() function returns a variable length
auditinfo_addr structure that contains the audit
ID, the preselection mask, the
terminal
ID, and the audit session
ID for the current process. The
terminal
ID contains a size field that indicates the size of the
network address.
The
setaudit_addr() function sets the audit
ID, the preselection
mask, the terminal
ID, and the audit session
ID for the current
process. The values are taken from the variable length structure
auditinfo_addr. The terminal
ID contains a size field that indicates
the size of the network address.
The
auditinfo structure is used to pass the process audit information
and contains the following members:
au_id_t ai_auid; /* audit user ID */
au_mask_t ai_mask; /* preselection mask */
au_tid_t ai_termid; /* terminal ID */
au_asid_t ai_asid; /* audit session ID */
The
auditinfo_addr structure is used to pass the process audit
information and contains the following members:
au_id_t ai_auid; /* audit user ID */
au_mask_t ai_mask; /* preselection mask */
au_tid_addr_t ai_termid; /* terminal ID */
au_asid_t ai_asid; /* audit session ID */
RETURN VALUES
Upon successful completion,
getaudit() and
setaudit() return
0.
Otherwise,
-1 is returned and
errno is set to indicate the error.
ERRORS
The
getaudit() and
setaudit() functions will fail if:
EFAULT The
info parameter points outside the process's allocated
address space.
EPERM The {
PRIV_SYS_AUDIT} privilege is not asserted in the
effective set of the calling process.
USAGE
The calling process must have the {
PRIV_SYS_AUDIT} privilege asserted
in its effective set.
ATTRIBUTES
See
attributes(7) for descriptions of the following attributes:
+--------------------+-----------------+
| ATTRIBUTE TYPE | ATTRIBUTE VALUE |
+--------------------+-----------------+
|Interface Stability | Stable |
+--------------------+-----------------+
|MT-Level | MT-Safe |
+--------------------+-----------------+
SEE ALSO
audit(2),
attributes(7) March 6, 2017 GETAUDIT(2)
