GETAUDITFLAGS(3BSM) Security and Auditing Library Functions

NAME

getauditflags, getauditflagsbin, getauditflagschar - convert audit
flag specifications

SYNOPSIS

cc [ flag... ] file... -lbsm -lsocket -lnsl [ library... ]
#include <sys/param.h>
#include <bsm/libbsm.h>

int getauditflagsbin(char *auditstring, au_mask_t *masks);


int getauditflagschar(char *auditstring, au_mask_t *masks, int verbose);

DESCRIPTION

The getauditflagsbin() function converts the character representation
of audit values pointed to by auditstring into au_mask_t fields
pointed to by masks. These fields indicate which events are to be
audited when they succeed and which are to be audited when they fail.


The getauditflagschar() function converts the au_mask_t fields
pointed to by masks into a string pointed to by auditstring. If
verbose is 0, the short (2-character) flag names are used. If verbose
is non-zero, the long flag names are used. The auditstring argument
should be large enough to contain the ASCII representation of the
events.


The auditstring argument contains a series of event names, each one
identifying a single audit class, separated by commas. The au_mask_t
fields pointed to by masks correspond to binary values defined in
<bsm/audit.h>, which is read by <bsm/libbsm.h>.

RETURN VALUES

Upon successful completion, getauditflagsbin() and
getauditflagschar() return 0. Otherwise they return -1.

ATTRIBUTES

See attributes(7) for descriptions of the following attributes:


+---------------+-----------------+
|ATTRIBUTE TYPE | ATTRIBUTE VALUE |
+---------------+-----------------+
|MT-Level | MT-Safe |
+---------------+-----------------+

SEE ALSO

audit.log(5), attributes(7)

BUGS

This is not a very extensible interface.

March 6, 2017 GETAUDITFLAGS(3BSM)