1/*-
2 * Copyright (c) 2005 Apple Inc.
3 * All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 *
9 * 1. Redistributions of source code must retain the above copyright
10 * notice, this list of conditions and the following disclaimer.
--- 10 unchanged lines hidden (view full) ---
21 * DISCLAIMED. IN NO EVENT SHALL APPLE OR ITS CONTRIBUTORS BE LIABLE FOR ANY
22 * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
23 * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
24 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
25 * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
26 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
27 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
28 *
29 * $P4: //depot/projects/trustedbsd/openbsm/bin/auditd/auditd.h#12 $
30 */
31
32#ifndef _AUDITD_H_
33#define _AUDITD_H_
34
35#include <sys/types.h>
36#include <sys/queue.h>
37#include <syslog.h>
--- 14 unchanged lines hidden (view full) ---
52#define CLOSEFILE_WARN "closefile"
53#define EBUSY_WARN "ebusy"
54#define GETACDIR_WARN "getacdir"
55#define HARDLIM_WARN "hard"
56#define NOSTART_WARN "nostart"
57#define POSTSIGTERM_WARN "postsigterm"
58#define SOFTLIM_WARN "soft"
59#define TMPFILE_WARN "tmpfile"
60
61#define AUDITWARN_SCRIPT "/etc/security/audit_warn"
62#define AUDITD_PIDFILE "/var/run/auditd.pid"
63
64#define AUD_STATE_INIT -1
65#define AUD_STATE_DISABLED 0
66#define AUD_STATE_ENABLED 1
67
68int audit_warn_allhard(void);
69int audit_warn_allsoft(void);
70int audit_warn_auditoff(void);
71int audit_warn_closefile(char *filename);
72int audit_warn_ebusy(void);
73int audit_warn_getacdir(char *filename);
74int audit_warn_hard(char *filename);
75int audit_warn_nostart(void);
76int audit_warn_postsigterm(void);
77int audit_warn_soft(char *filename);
78int audit_warn_tmpfile(void);
79
80void auditd_openlog(int debug, gid_t gid);
81void auditd_log_err(const char *fmt, ...);
82void auditd_log_debug(const char *fmt, ...);
83void auditd_log_info(const char *fmt, ...);
84void auditd_log_notice(const char *fmt, ...);
85
86void auditd_set_state(int state);
--- 14 unchanged lines hidden ---
2 * Copyright (c) 2005 Apple Inc.
3 * All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 *
9 * 1. Redistributions of source code must retain the above copyright
10 * notice, this list of conditions and the following disclaimer.
--- 10 unchanged lines hidden (view full) ---
21 * DISCLAIMED. IN NO EVENT SHALL APPLE OR ITS CONTRIBUTORS BE LIABLE FOR ANY
22 * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
23 * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
24 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
25 * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
26 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
27 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
28 *
29 * $P4: //depot/projects/trustedbsd/openbsm/bin/auditd/auditd.h#12 $
30 */
31
32#ifndef _AUDITD_H_
33#define _AUDITD_H_
34
35#include <sys/types.h>
36#include <sys/queue.h>
37#include <syslog.h>
--- 14 unchanged lines hidden (view full) ---
52#define CLOSEFILE_WARN "closefile"
53#define EBUSY_WARN "ebusy"
54#define GETACDIR_WARN "getacdir"
55#define HARDLIM_WARN "hard"
56#define NOSTART_WARN "nostart"
57#define POSTSIGTERM_WARN "postsigterm"
58#define SOFTLIM_WARN "soft"
59#define TMPFILE_WARN "tmpfile"
60
61#define AUDITWARN_SCRIPT "/etc/security/audit_warn"
62#define AUDITD_PIDFILE "/var/run/auditd.pid"
63
64#define AUD_STATE_INIT -1
65#define AUD_STATE_DISABLED 0
66#define AUD_STATE_ENABLED 1
67
68int audit_warn_allhard(void);
69int audit_warn_allsoft(void);
70int audit_warn_auditoff(void);
71int audit_warn_closefile(char *filename);
72int audit_warn_ebusy(void);
73int audit_warn_getacdir(char *filename);
74int audit_warn_hard(char *filename);
75int audit_warn_nostart(void);
76int audit_warn_postsigterm(void);
77int audit_warn_soft(char *filename);
78int audit_warn_tmpfile(void);
79
80void auditd_openlog(int debug, gid_t gid);
81void auditd_log_err(const char *fmt, ...);
82void auditd_log_debug(const char *fmt, ...);
83void auditd_log_info(const char *fmt, ...);
84void auditd_log_notice(const char *fmt, ...);
85
86void auditd_set_state(int state);
--- 14 unchanged lines hidden ---