getacinfo(3)

NAME | SYNOPSIS | DESCRIPTION | FILES | RETURN VALUES | ATTRIBUTES | SEE ALSO | NOTES

NAME

getacinfo, getacdir, getacflg, getacmin, getacna, setac, endac- get audit control file information

SYNOPSIS

cc [ flag ... ] file ... -lbsm -lsocket -lnsl -lintl [ library ... ]
#include <bsm/libbsm.h>

int getacdir( char *dir, int len);
int getacmin( int *min_val);
int getacflg( char *auditstring, int len);
int getacna( char *auditstring, int len);
void setac( void);
void endac( void);

DESCRIPTION

When first called, getacdir() provides information about the first audit directory in the audit_control file; thereafter, it returns the next directory in the file. Successive calls list all the directories listed in audit_control(4) The parameter len specifies the length of the buffer dir. On return, dir points to the directory entry.

getacmin() reads the minimum value from the audit_control file and returns the value in min_val. The minimum value specifies how full the file system to which the audit files are being written can get before the script audit_warn(1M) is invoked.

getacflg() reads the system audit value from the audit_control file and returns the value in auditstring. The parameter len specifies the length of the buffer auditstring.

getacna() reads the system audit value for non-attributable audit events from the audit_control file and returns the value in auditstring. The parameter len specifies the length of the buffer auditstring. Non-attributable events are events that cannot be attributed to an individual user. inetd(1M) and several other daemons record non-attributable events.

Calling setac rewinds the audit_control file to allow repeated searches.

Calling endac closes the audit_control file when processing is complete.

FILES

/etc/security/audit_control

contains default parameters read by the audit daemon, auditd(1M)

RETURN VALUES

getacdir(), getacflg(), getacna() and getacmin() return:

0

on success.

-2

on failure and set errno to indicate the error.

getacmin() and getacflg() return:

1

on EOF.

getacdir() returns:

-1

on EOF.

2

if the directory search had to start from the beginning because one of the other functions was called between calls to getacdir().

These functions return:

-3

if the directory entry format in the audit_control file is incorrect.

getacdir(), getacflg() and getacna() return:

-3

if the input buffer is too short to accommodate the record.

ATTRIBUTES

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPE	ATTRIBUTE VALUE
MT-Level	Safe.

SEE ALSO

audit_warn(1M), bsmconv(1M), inetd(1M), audit_control(4), attributes(5)

NOTES

The functionality described in this man page is available only if the Basic Security Module (BSM) has been enabled. See bsmconv(1M) for more information.

SunOS 5.7  Last Revised 29 Dec 1996

NAME | SYNOPSIS | DESCRIPTION | FILES | RETURN VALUES | ATTRIBUTES | SEE ALSO | NOTES