1/*-
2 * Copyright (c) 2005-2009 Apple Inc.
3 * All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 *
9 * 1. Redistributions of source code must retain the above copyright
10 * notice, this list of conditions and the following disclaimer.
--- 10 unchanged lines hidden (view full) ---
21 * DISCLAIMED. IN NO EVENT SHALL APPLE OR ITS CONTRIBUTORS BE LIABLE FOR ANY
22 * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
23 * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
24 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
25 * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
26 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
27 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
28 *
29 * $P4: //depot/projects/trustedbsd/openbsm/bin/auditd/auditd.h#13 $
30 */
31
32#ifndef _AUDITD_H_
33#define _AUDITD_H_
34
35#include <sys/types.h>
36#include <sys/queue.h>
37#include <syslog.h>
--- 14 unchanged lines hidden (view full) ---
52#define CLOSEFILE_WARN "closefile"
53#define EBUSY_WARN "ebusy"
54#define GETACDIR_WARN "getacdir"
55#define HARDLIM_WARN "hard"
56#define NOSTART_WARN "nostart"
57#define POSTSIGTERM_WARN "postsigterm"
58#define SOFTLIM_WARN "soft"
59#define TMPFILE_WARN "tmpfile"
60#define EXPIRED_WARN "expired"
61
62#define AUDITWARN_SCRIPT "/etc/security/audit_warn"
63#define AUDITD_PIDFILE "/var/run/auditd.pid"
64
65#define AUD_STATE_INIT -1
66#define AUD_STATE_DISABLED 0
67#define AUD_STATE_ENABLED 1
68
69int audit_warn_allhard(void);
70int audit_warn_allsoft(void);
71int audit_warn_auditoff(void);
72int audit_warn_closefile(char *filename);
73int audit_warn_ebusy(void);
74int audit_warn_getacdir(char *filename);
75int audit_warn_hard(char *filename);
76int audit_warn_nostart(void);
77int audit_warn_postsigterm(void);
78int audit_warn_soft(char *filename);
79int audit_warn_tmpfile(void);
80int audit_warn_expired(char *filename);
81
82void auditd_openlog(int debug, gid_t gid);
83void auditd_log_err(const char *fmt, ...);
84void auditd_log_debug(const char *fmt, ...);
85void auditd_log_info(const char *fmt, ...);
86void auditd_log_notice(const char *fmt, ...);
87
88void auditd_set_state(int state);
--- 14 unchanged lines hidden ---
2 * Copyright (c) 2005-2009 Apple Inc.
3 * All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 *
9 * 1. Redistributions of source code must retain the above copyright
10 * notice, this list of conditions and the following disclaimer.
--- 10 unchanged lines hidden (view full) ---
21 * DISCLAIMED. IN NO EVENT SHALL APPLE OR ITS CONTRIBUTORS BE LIABLE FOR ANY
22 * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
23 * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
24 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
25 * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
26 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
27 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
28 *
29 * $P4: //depot/projects/trustedbsd/openbsm/bin/auditd/auditd.h#13 $
30 */
31
32#ifndef _AUDITD_H_
33#define _AUDITD_H_
34
35#include <sys/types.h>
36#include <sys/queue.h>
37#include <syslog.h>
--- 14 unchanged lines hidden (view full) ---
52#define CLOSEFILE_WARN "closefile"
53#define EBUSY_WARN "ebusy"
54#define GETACDIR_WARN "getacdir"
55#define HARDLIM_WARN "hard"
56#define NOSTART_WARN "nostart"
57#define POSTSIGTERM_WARN "postsigterm"
58#define SOFTLIM_WARN "soft"
59#define TMPFILE_WARN "tmpfile"
60#define EXPIRED_WARN "expired"
61
62#define AUDITWARN_SCRIPT "/etc/security/audit_warn"
63#define AUDITD_PIDFILE "/var/run/auditd.pid"
64
65#define AUD_STATE_INIT -1
66#define AUD_STATE_DISABLED 0
67#define AUD_STATE_ENABLED 1
68
69int audit_warn_allhard(void);
70int audit_warn_allsoft(void);
71int audit_warn_auditoff(void);
72int audit_warn_closefile(char *filename);
73int audit_warn_ebusy(void);
74int audit_warn_getacdir(char *filename);
75int audit_warn_hard(char *filename);
76int audit_warn_nostart(void);
77int audit_warn_postsigterm(void);
78int audit_warn_soft(char *filename);
79int audit_warn_tmpfile(void);
80int audit_warn_expired(char *filename);
81
82void auditd_openlog(int debug, gid_t gid);
83void auditd_log_err(const char *fmt, ...);
84void auditd_log_debug(const char *fmt, ...);
85void auditd_log_info(const char *fmt, ...);
86void auditd_log_notice(const char *fmt, ...);
87
88void auditd_set_state(int state);
--- 14 unchanged lines hidden ---