Проект OpenNet: MAN audit_submit (3) Библиотечные вызовы (FreeBSD и Linux)

Интерактивная система просмотра системных руководств (man-ов)

audit_submit (3)

>> audit_submit (3) ( FreeBSD man: Библиотечные вызовы )

BSD mandoc

NAME



audit_submit

 - general purpose audit record submission

LIBRARY

Lb libbsm

SYNOPSIS

#include <bsm/libbsm.h>
int Fo audit_submit Fa short au_event au_id_t auid char status Fa int reterr const char * restrict format ... Fc

DESCRIPTION

The audit_submit ();
function provides a generic programming interface for audit record submission. This audit record will contain a header, subject token, an optional text token, return token, and a trailer. The header will contain the event class specified by Fa au_event . The subject token will be generated based on Fa au_ctx . The return token is dependent on the Fa status and Fa reterr arguments. Optionally, a text token will be created as a part of this record.

Text token output is under the control of a Fa format string that specifies how subsequent arguments (or arguments accessed via the variable-length argument facilities of stdarg(3)) are converted for output. If Fa format is NULL then no text token is created in the audit record.

It should be noted that audit_submit ();
assumes that setaudit(2), or setaudit_addr2 has already been called. As a direct result, the terminal ID for the subject will be retrieved from the kernel via getaudit(2), or getaudit_addr2.

EXAMPLES

#include <bsm/audit.h>
#include <bsm/libbsm.h>
#include <bsm/audit_uevents.h>

#include <stdio.h>
#include <stdarg.h>
#include <errno.h>

int
audit_bad_su(char *from_login, char *to_login)
{
        int error;

        error = audit_submit(AUE_su, getuid(), 1, EPERM,
            "bad su from %s to %s", from_login, to_login);
        return (error);
}

Will generate the following audit record:

header,94,1,su(1),0,Mon Apr 17 23:23:59 2006, + 271 msec
subject,root,root,wheel,root,wheel,652,652,0,0.0.0.0
text,bad su from from csjp to root
return,failure : Operation not permitted,1
trailer,94