diff options
Diffstat (limited to 'contrib/openbsm/man/setaudit.2')
| -rw-r--r-- | contrib/openbsm/man/setaudit.2 | 60 |
1 files changed, 21 insertions, 39 deletions
diff --git a/contrib/openbsm/man/setaudit.2 b/contrib/openbsm/man/setaudit.2 index 5426c87..41448d6 100644 --- a/contrib/openbsm/man/setaudit.2 +++ b/contrib/openbsm/man/setaudit.2 @@ -24,7 +24,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.\" $P4: //depot/projects/trustedbsd/openbsm/man/setaudit.2#10 $ +.\" $P4: //depot/projects/trustedbsd/openbsm/man/setaudit.2#12 $ .\" .Dd April 19, 2005 .Dt SETAUDIT 2 @@ -58,9 +58,7 @@ and The .Fa auditinfo_t data structure is defined as follows: -.nf -.in +4n - +.Bd -literal -offset 4n struct auditinfo { au_id_t ai_auid; /* Audit user ID */ au_mask_t ai_mask; /* Audit masks */ @@ -68,62 +66,50 @@ struct auditinfo { au_asid_t ai_asid; /* Audit session ID */ }; typedef struct auditinfo auditinfo_t; -.in -.fi +.Ed .Pp The .Fa ai_auid -variable contains the audit identifier which is recorded in the audit log for +variable contains the audit identifier which is recorded in the audit log for each event the process caused. -.PP - +.Pp The .Fa au_mask_t -data structure defines the bit mask for auditing successful and failed events +data structure defines the bit mask for auditing successful and failed events out of the predefined list of event classes. It is defined as follows: -.nf -.in +4n - +.Bd -literal -offset 4n struct au_mask { unsigned int am_success; /* success bits */ unsigned int am_failure; /* failure bits */ }; typedef struct au_mask au_mask_t; -.in -.fi -.PP - +.Ed +.Pp The .Fa au_termid_t -data structure defines the Terminal ID recorded with every event caused by the +data structure defines the Terminal ID recorded with every event caused by the process. It is defined as follows: -.nf -.in +4n - +.Bd -literal -offset 4n struct au_tid { dev_t port; u_int32_t machine; }; typedef struct au_tid au_tid_t; - -.in -.fi -.PP +.Ed +.Pp The .Fa ai_asid -variable contains the audit session ID which is recorded with every event +variable contains the audit session ID which is recorded with every event caused by the process. .Pp The .Fn setaudit_addr system call uses the expanded -.Fa auditinfo_addr_t +.Fa auditinfo_addr_t data structure supports Terminal IDs with larger addresses such as those used in IP version 6. It is defined as follows: -.nf -.in +4n - +.Bd -literal -offset 4n struct auditinfo_addr { au_id_t ai_auid; /* Audit user ID. */ au_mask_t ai_mask; /* Audit masks. */ @@ -131,24 +117,20 @@ struct auditinfo_addr { au_asid_t ai_asid; /* Audit session ID. */ }; typedef struct auditinfo_addr auditinfo_addr_t; -.in -.fi +.Ed .Pp -The +The .Fa au_tid_addr_t -data structure which includes a larger address storage field and an additional +data structure which includes a larger address storage field and an additional field with the type of address stored: -.nf -.in +4n - +.Bd -literal -offset 4n struct au_tid_addr { dev_t at_port; u_int32_t at_type; u_int32_t at_addr[4]; }; typedef struct au_tid_addr au_tid_addr_t; -.in -.fi +.Ed .Pp These system calls require an appropriate privilege to complete. .Sh RETURN VALUES |
