diff options
Diffstat (limited to 'contrib/openbsm/man/auditon.2')
-rw-r--r-- | contrib/openbsm/man/auditon.2 | 25 |
1 files changed, 14 insertions, 11 deletions
diff --git a/contrib/openbsm/man/auditon.2 b/contrib/openbsm/man/auditon.2 index 4e38dc4..9dedbba 100644 --- a/contrib/openbsm/man/auditon.2 +++ b/contrib/openbsm/man/auditon.2 @@ -25,7 +25,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.\" $P4: //depot/projects/trustedbsd/openbsm/man/auditon.2#6 $ +.\" $P4: //depot/projects/trustedbsd/openbsm/man/auditon.2#7 $ .\" .Dd April 19, 2005 .Dt AUDITON 2 @@ -53,8 +53,9 @@ may be any of the following: .It Dv A_SETPOLICY Set audit policy flags. .Ft *data -must point to an long value set to one of the audit -policy control values defined in audit.h. +must point to a long value set to one of the audit +policy control values defined in +.Pa audit.h . Currently, only .Dv AUDIT_CNT and @@ -83,7 +84,7 @@ These masks are used for non-attributable audit event preselection. .It Dv A_SETQCTRL Set kernel audit queue parameters. .Ft *data -must point to a +must point to a .Ft au_qctrl_t structure containing the kernel audit queue control settings: @@ -106,7 +107,7 @@ Return .It Dv A_SETCOND Set the current auditing condition. .Ft *data -must point to an long value containing the new +must point to a long value containing the new audit condition, one of .Dv AUC_AUDITING , .Dv AUC_NOAUDIT , @@ -115,13 +116,13 @@ or .It Dv A_SETCLASS Set the event class preselection mask for an audit event. .Ft *data -must point to a +must point to a .Ft au_evclass_map_t structure containing the audit event and mask. .It Dv A_SETPMASK Set the preselection masks for a process. .Ft *data -must point to a +must point to a .Ft auditpinfo_t structure that contains the given process's audit preselection masks for both success and failure. @@ -167,7 +168,7 @@ the current kernel preselection masks for non-attributable events. .It Dv A_GETPOLICY Return the current audit policy setting. .Ft *data -must point to an long value which will be set to +must point to a long value which will be set to one of the current audit policy flags. Currently, only .Dv AUDIT_CNT @@ -188,8 +189,8 @@ must point to a .Ft au_fstat_t structure. The .Ft af_filesz -field will set to the maximum audit log file size. A value of 0 -indicates no limit to the size. +field will be set to the maximum audit log file size. +A value of 0 indicates no limit to the size. The .Ft af_filesz will be set to the current audit log file size. @@ -227,7 +228,9 @@ trigger values: .Dv AUDIT_TRIGGER_OPEN_NEW (open a new audit log file), .Dv AUDIT_TRIGGER_READ_FILE -(read the audit_control file), +(read the +.Pa audit_control +file), .Dv AUDIT_TRIGGER_CLOSE_AND_DIE (close the current log file and exit), or |