GETAUDITFLAGS(3BSM) Security and Auditing Library Functions
getauditflags, getauditflagsbin, getauditflagschar - convert audit
flag specifications
cc [ flag... ] file... -lbsm -lsocket -lnsl [ library... ]
#include <sys/param.h>
#include <bsm/libbsm.h>
int getauditflagsbin(char *auditstring, au_mask_t *masks);
int getauditflagschar(char *auditstring, au_mask_t *masks, int verbose);
The getauditflagsbin() function converts the character representation
of audit values pointed to by auditstring into au_mask_t fields
pointed to by masks. These fields indicate which events are to be
audited when they succeed and which are to be audited when they fail.
The getauditflagschar() function converts the au_mask_t fields
pointed to by masks into a string pointed to by auditstring. If
verbose is 0, the short (2-character) flag names are used. If verbose
is non-zero, the long flag names are used. The auditstring argument
should be large enough to contain the ASCII representation of the
events.
The auditstring argument contains a series of event names, each one
identifying a single audit class, separated by commas. The au_mask_t
fields pointed to by masks correspond to binary values defined in
<bsm/audit.h>, which is read by <bsm/libbsm.h>.
Upon successful completion, getauditflagsbin() and
getauditflagschar() return 0. Otherwise they return -1.
See attributes(7) for descriptions of the following attributes:
+---------------+-----------------+
|ATTRIBUTE TYPE | ATTRIBUTE VALUE |
+---------------+-----------------+
|MT-Level | MT-Safe |
+---------------+-----------------+
audit.log(5), attributes(7)
This is not a very extensible interface.
March 6, 2017 GETAUDITFLAGS(3BSM)
NAME
getauditflags, getauditflagsbin, getauditflagschar - convert audit
flag specifications
SYNOPSIS
cc [ flag... ] file... -lbsm -lsocket -lnsl [ library... ]
#include <sys/param.h>
#include <bsm/libbsm.h>
int getauditflagsbin(char *auditstring, au_mask_t *masks);
int getauditflagschar(char *auditstring, au_mask_t *masks, int verbose);
DESCRIPTION
The getauditflagsbin() function converts the character representation
of audit values pointed to by auditstring into au_mask_t fields
pointed to by masks. These fields indicate which events are to be
audited when they succeed and which are to be audited when they fail.
The getauditflagschar() function converts the au_mask_t fields
pointed to by masks into a string pointed to by auditstring. If
verbose is 0, the short (2-character) flag names are used. If verbose
is non-zero, the long flag names are used. The auditstring argument
should be large enough to contain the ASCII representation of the
events.
The auditstring argument contains a series of event names, each one
identifying a single audit class, separated by commas. The au_mask_t
fields pointed to by masks correspond to binary values defined in
<bsm/audit.h>, which is read by <bsm/libbsm.h>.
RETURN VALUES
Upon successful completion, getauditflagsbin() and
getauditflagschar() return 0. Otherwise they return -1.
ATTRIBUTES
See attributes(7) for descriptions of the following attributes:
+---------------+-----------------+
|ATTRIBUTE TYPE | ATTRIBUTE VALUE |
+---------------+-----------------+
|MT-Level | MT-Safe |
+---------------+-----------------+
SEE ALSO
audit.log(5), attributes(7)
BUGS
This is not a very extensible interface.
March 6, 2017 GETAUDITFLAGS(3BSM)