summaryrefslogtreecommitdiffstats
path: root/contrib/openbsm/bsm/audit.h
diff options
context:
space:
mode:
authorrwatson <rwatson@FreeBSD.org>2006-03-04 16:45:52 +0000
committerrwatson <rwatson@FreeBSD.org>2006-03-04 16:45:52 +0000
commitab71945909ae42af4e5fa0802d62298315b31281 (patch)
treebf80089d9b6069156fa54061c123d3e0d1dd6377 /contrib/openbsm/bsm/audit.h
parent0b2cf89651826909f5fdc3b98f24a31060a0f915 (diff)
downloadFreeBSD-src-ab71945909ae42af4e5fa0802d62298315b31281.zip
FreeBSD-src-ab71945909ae42af4e5fa0802d62298315b31281.tar.gz
Vendor branch import of TrustedBSD OpenBSM 1.0 alpha 5:
- Update install notes to indicate /etc files are to be installed manually. - On systems without LOG_SECURITY, use LOG_AUTH. - Convert to autoconf/automake in order to move to a more portable (not BSD-specific) build infrastructure, and more easy conditional building of components. Currently, the primary feature loss is that automake does not have native support for manual symlinks. This will be addressed in a future OpenBSM release. - Add compat/queue.h, to be used on systems dated BSD queue macro libraries (as found on Linux). - Rename CHANGELOG to HISTORY, as our change log doesn't follow some of the existing conventions for a CHANGELOG. - Some private data structures moved from audit.h to audit_internal.h to prevent inappropriate use by applications and name space pollution. - Improved detection and use of endian macros using autoconf. - Avoid non-portable use of struct in6_addr, which is largely opaque. - Avoid leaking BSD kernel socket related token code to user space in bsm_token.c. - Teach System V IPC calls to look for Linux naming variations for certain struct ipc_perm fields. - Test for audit system calls, and if not present, don't build bsm_wrappers.c, bsm_notify.c, audit(8), and auditd(8), which rely on those system calls. - au_close() is not implemented on systems that don't have audit system calls, but au_close_buffer() is. - Work around missing BSDisms in bsm_wrapper.c. - Fix nested includes so including libbsm.h in an application on Linux picks up the necessary definitions. Obtained from: TrustedBSD Project
Diffstat (limited to 'contrib/openbsm/bsm/audit.h')
-rw-r--r--contrib/openbsm/bsm/audit.h25
1 files changed, 7 insertions, 18 deletions
diff --git a/contrib/openbsm/bsm/audit.h b/contrib/openbsm/bsm/audit.h
index 1d208c1..8739b2a 100644
--- a/contrib/openbsm/bsm/audit.h
+++ b/contrib/openbsm/bsm/audit.h
@@ -30,7 +30,7 @@
*
* @APPLE_BSD_LICENSE_HEADER_END@
*
- * $P4: //depot/projects/trustedbsd/openbsm/bsm/audit.h#14 $
+ * $P4: //depot/projects/trustedbsd/openbsm/bsm/audit.h#15 $
*/
#ifndef _BSM_AUDIT_H
@@ -240,25 +240,11 @@ struct auditpinfo_addr {
};
typedef struct auditpinfo_addr auditpinfo_addr_t;
-/* Token and record structures. */
-
-struct au_token {
- u_char *t_data;
- size_t len;
- TAILQ_ENTRY(au_token) tokens;
-};
+/*
+ * Contents of token_t are opaque outside of libbsm.
+ */
typedef struct au_token token_t;
-struct au_record {
- char used; /* Record currently in use? */
- int desc; /* Descriptor for record. */
- TAILQ_HEAD(, au_token) token_q; /* Queue of BSM tokens. */
- u_char *data;
- size_t len;
- LIST_ENTRY(au_record) au_rec_q;
-};
-typedef struct au_record au_record_t;
-
/*
* Kernel audit queue control parameters.
*/
@@ -310,6 +296,9 @@ struct au_evclass_map {
};
typedef struct au_evclass_map au_evclass_map_t;
+/*
+ * Audit system calls.
+ */
#if !defined(_KERNEL) && !defined(KERNEL)
int audit(const void *, int);
int auditon(int, void *, int);
OpenPOWER on IntegriCloud