free_au_event_entsetaueventendaueventgetaueventgetauevent_rgetauevnamgetauevnam_rgetauevnumgetauevnum_rgetauevnonamgetauevnonam_r
- look up information from the audit_event database
These interfaces may be used to look up information from the
audit_event5
database, which describes audit events.
Entries in the database are described by
Vt struct au_event_ent
entries, which are returned by calls to
getauevent (,);
getauevnam (,);
or
getauevnum (.);
It is also possible to look up an event number via a call to
getauevnonam (.);
The
setauevent ();
function
resets the database access session for
audit_event5,
so that the next call to
getauevent ();
will start with the first entry in the database.
The
endauevent ();
function
closes the
audit_event5
database session.
The
getauevent ();
function
returns a reference to the next entry in the
audit_event5
database.
The
getauevnam ();
function
returns a reference to the entry in the
audit_event5
database with a name of
Fa name .
getauevnum ();
returns a reference to the entry in the
audit_event5
database with an event number of
Fa event_number .
The
getauevnonam ();
function
returns a reference to an audit event number using the
audit_event5
database.
RETURN VALUES
Functions
getauevent (,);
getauevent_r (,);
getauevnam (,);
getauevnam_r (,);
getauevnum (,);
getauevnum_r (,);
and
getauevnonam ();
will return a reference to a
Vt struct au_event_ent
or
Vt au_event_t
on success, or
NULL
on failure, with
errno
set to provide further error information.
The OpenBSM implementation was created by McAfee Research, the security
division of McAfee Inc., under contract to Apple Computer, Inc., in 2004.
It was subsequently adopted by the TrustedBSD Project as the foundation for
the OpenBSM distribution.
AUTHORS
An -nosplit
This software was created by
An Robert Watson ,
An Wayne Salamon ,
and
An Suresh Krishnaswamy
for McAfee Research, the security research division of McAfee,
Inc., under contract to Apple Computer, Inc.
The Basic Security Module (BSM) interface to audit records and audit event
stream format were defined by Sun Microsystems.
BUGS
The
errno
variable
is not always properly set following a failure.
These routines are thread-safe, but not re-entrant, so simultaneous or
interleaved use of these functions will affect the iterator.
