Security and Auditing Library Functions auusermask(3BSM)
NAME
auusermask - get user's binary preselection mask
SYNOPSIS
cc [ flag... ] file... -lbsm -lsocket -lnsl [ library... ]
#include
int auusermask(char *username, aumaskt *maskp);
DESCRIPTION
The auusermask() function reads the default, system wide
audit classes from auditcontrol(4), combines them with the
per-user audit classes from the audituser(4) database, and
updates the binary preselection mask pointed to by maskp
with the combined value.
The audit flags in the flags field of the auditcontrol(4)
database and the always-audit-flags and never-audit-flags
from the audituser(4) database represent binary audit
classes. These fields are combined by aupreselect(3BSM) as
follows:
mask = ( flags ] always-audit-flags) - never-audit-flags
The auusermask() function fails only if both the both the
auditcontrol(4) and the audituser(4) database entries
could not be retrieved. This allows for flexible configura-
tions.
RETURN VALUES
Upon successful completion, auusermask() returns 0. It
fails and returns -1 if both the auditcontrol(4) and the
audituser(4) database entries could not be retrieved.
FILES
/etc/security/auditcontrol
file containing default parameters read by the audit
daemon, auditd(1M)
/etc/security/audituser
file that stores per-user audit event mask
ATRIBUTES
SunOS 5.11 Last change: 31 Mar 2005 1
Security and Auditing Library Functions auusermask(3BSM)
See attributes(5) for descriptions of the following attri-
butes:
ATRIBUTE TYPE ATRIBUTE VALUE
Interface Stability Stable
MT-Level MT-Safe
SEE ALSO
login(1), bsmconv(1M), getaudit(2), setaudit(2),
aupreselect(3BSM), getacinfo(3BSM), getauusernam(3BSM),
auditcontrol(4), audituser(4), attributes(5)
NOTES
The auusermask() function should be called by programs
like login(1) which set a process's preselection mask with
setaudit(2). getaudit(2) should be used to obtain audit
characteristics for the current process.
The functionality described on this manual page is available
only if the Solaris Auditing has been enabled. See
bsmconv(1M) for more information.
SunOS 5.11 Last change: 31 Mar 2005 2
|