aboutsummaryrefslogtreecommitdiff
path: root/contrib/openbsm/man/setaudit.2
diff options
context:
space:
mode:
authorRobert Watson <rwatson@FreeBSD.org>2012-12-01 11:58:08 +0000
committerRobert Watson <rwatson@FreeBSD.org>2012-12-01 11:58:08 +0000
commitaa77200569e397d6ff1fdb4d255d0fa254d0a128 (patch)
tree6ec8d83f07a4534def35774b9687d13b3262b2a1 /contrib/openbsm/man/setaudit.2
parent8909f88d285bdd9f8d571dbb6942ab0747ff81ab (diff)
parent399d3f65db6c7d2b9e9f56ec3062b520d8e0e433 (diff)
Merge OpenBSM 1.2-alpha2 from vendor branch to FreeBSD 10-CURRENT; the
primary new feature is auditdistd. Obtained from: TrustedBSD Project Sponsored by: The FreeBSD Foundation (auditdistd)
Notes
Notes: svn path=/head/; revision=243750
Diffstat (limited to 'contrib/openbsm/man/setaudit.2')
-rw-r--r--contrib/openbsm/man/setaudit.260
1 files changed, 21 insertions, 39 deletions
diff --git a/contrib/openbsm/man/setaudit.2 b/contrib/openbsm/man/setaudit.2
index 5426c87b83f2..41448d64699f 100644
--- a/contrib/openbsm/man/setaudit.2
+++ b/contrib/openbsm/man/setaudit.2
@@ -24,7 +24,7 @@
.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
.\" SUCH DAMAGE.
.\"
-.\" $P4: //depot/projects/trustedbsd/openbsm/man/setaudit.2#10 $
+.\" $P4: //depot/projects/trustedbsd/openbsm/man/setaudit.2#12 $
.\"
.Dd April 19, 2005
.Dt SETAUDIT 2
@@ -58,9 +58,7 @@ and
The
.Fa auditinfo_t
data structure is defined as follows:
-.nf
-.in +4n
-
+.Bd -literal -offset 4n
struct auditinfo {
au_id_t ai_auid; /* Audit user ID */
au_mask_t ai_mask; /* Audit masks */
@@ -68,62 +66,50 @@ struct auditinfo {
au_asid_t ai_asid; /* Audit session ID */
};
typedef struct auditinfo auditinfo_t;
-.in
-.fi
+.Ed
.Pp
The
.Fa ai_auid
-variable contains the audit identifier which is recorded in the audit log for
+variable contains the audit identifier which is recorded in the audit log for
each event the process caused.
-.PP
-
+.Pp
The
.Fa au_mask_t
-data structure defines the bit mask for auditing successful and failed events
+data structure defines the bit mask for auditing successful and failed events
out of the predefined list of event classes. It is defined as follows:
-.nf
-.in +4n
-
+.Bd -literal -offset 4n
struct au_mask {
unsigned int am_success; /* success bits */
unsigned int am_failure; /* failure bits */
};
typedef struct au_mask au_mask_t;
-.in
-.fi
-.PP
-
+.Ed
+.Pp
The
.Fa au_termid_t
-data structure defines the Terminal ID recorded with every event caused by the
+data structure defines the Terminal ID recorded with every event caused by the
process. It is defined as follows:
-.nf
-.in +4n
-
+.Bd -literal -offset 4n
struct au_tid {
dev_t port;
u_int32_t machine;
};
typedef struct au_tid au_tid_t;
-
-.in
-.fi
-.PP
+.Ed
+.Pp
The
.Fa ai_asid
-variable contains the audit session ID which is recorded with every event
+variable contains the audit session ID which is recorded with every event
caused by the process.
.Pp
The
.Fn setaudit_addr
system call
uses the expanded
-.Fa auditinfo_addr_t
+.Fa auditinfo_addr_t
data structure supports Terminal IDs with larger addresses such as those used
in IP version 6. It is defined as follows:
-.nf
-.in +4n
-
+.Bd -literal -offset 4n
struct auditinfo_addr {
au_id_t ai_auid; /* Audit user ID. */
au_mask_t ai_mask; /* Audit masks. */
@@ -131,24 +117,20 @@ struct auditinfo_addr {
au_asid_t ai_asid; /* Audit session ID. */
};
typedef struct auditinfo_addr auditinfo_addr_t;
-.in
-.fi
+.Ed
.Pp
-The
+The
.Fa au_tid_addr_t
-data structure which includes a larger address storage field and an additional
+data structure which includes a larger address storage field and an additional
field with the type of address stored:
-.nf
-.in +4n
-
+.Bd -literal -offset 4n
struct au_tid_addr {
dev_t at_port;
u_int32_t at_type;
u_int32_t at_addr[4];
};
typedef struct au_tid_addr au_tid_addr_t;
-.in
-.fi
+.Ed
.Pp
These system calls require an appropriate privilege to complete.
.Sh RETURN VALUES