Security and Auditing Library Functions getfauditflags(3BSM)
NAME
getfauditflags - generate process audit state
SYNOPSIS
cc [ flag... ] file... -lbsm -lsocket -lnsl [ library... ]
#include
#include
int getfauditflags(aumaskt *usremasks, aumaskt *usrdmasks,
aumaskt *lastmasks);
DESCRIPTION
The getfauditflags() function generates a process audit
state by combining the audit masks passed as parameters
with the system audit masks specified in the
auditcontrol(4) file. The getfauditflags() function obtains
the system audit value by calling getacflg() (see
getacinfo(3BSM)).
The usremasks argument points to aumaskt fields that con-
tains two values. The first value defines which events are
always to be audited when they succeed. The second value
defines which events are always to be audited when they
fail.
The usrdmasks argument points to aumaskt fields that con-
tains two values. The first value defines which events are
never to be audited when they succeed. The second value
defines which events are never to be audited when they fail.
The structures pointed to by usremasks and usrdmasks can be
obtained from the audituser(4) file by calling
getauusernam(3BSM), which returns a pointer to a strucure
containing all audituser(4) fields for a user.
The output of this function is stored in lastmasks, a
pointer of type aumaskt as well. The first value defines
which events are to be audited when they succeed and the
second defines which events are to be audited when they
fail.
Both usremasks and usrdmasks override the values in the sys-
tem audit values.
RETURN VALUES
SunOS 5.11 Last change: 31 Mar 2005 1
Security and Auditing Library Functions getfauditflags(3BSM)
Upon successful completion, getfauditflags() returns 0. Oth-
erwise it returns -1.
ATRIBUTES
See attributes(5) for descriptions of the following attri-
butes:
ATRIBUTE TYPE ATRIBUTE VALUE
MT-Level MT-Safe
SEE ALSO
bsmconv(1M), getacinfo(3BSM), getauditflags(3BSM),
getauusernam(3BSM), audit.log(4), auditcontrol(4),
audituser(4), attributes(5)
NOTES
The functionality described on this manual page is available
only if the Solaris Auditing has been enabled. See
bsmconv(1M) for more information.
SunOS 5.11 Last change: 31 Mar 2005 2
|