1.\" Copyright (c) 2006 Robert N. M. Watson
2.\" All rights reserved.
3.\"
4.\" Redistribution and use in source and binary forms, with or without
5.\" modification, are permitted provided that the following conditions
6.\" are met:
7.\" 1. Redistributions of source code must retain the above copyright
8.\" notice, this list of conditions and the following disclaimer.
--- 8 unchanged lines hidden (view full) ---
17.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
18.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
19.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
20.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
21.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
22.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
23.\" SUCH DAMAGE.
24.\"
25.\" $FreeBSD: head/share/man/man4/auditpipe.4 159282 2006-06-05 16:31:57Z joel $
26.\"
27.Dd May 5, 2006
28.Os
29.Dt AUDITPIPE 4
30.Sh NAME
31.Nm auditpipe
32.Nd Pseudo-device for live audit event tracking
33.Sh SYNOPSIS
--- 35 unchanged lines hidden (view full) ---
69and
70.Xr poll 2 .
71.Pp
72Applications may choose to track the global audit trail, or configure local
73preselection parameters independent of the global audit trail parameters.
74.Ss Audit Pipe Queue Ioctls
75The following ioctls retrieve and set various audit pipe record queue
76properties:
77.Bl -tag -width AUDITPIPE_GET_QLIMIT_MIN
78.It AUDITPIPE_GET_QLEN
79Query the current number of records available for reading on the pipe.
80.It AUDITPIPE_GET_QLIMIT
81Retrieve the current maximum number of records that may be queued for reading
82on the pipe.
83.It AUDITPIPE_SET_QLIMIT
84Set the current maximum number of records that may be queued for reading on
85the pipe.
--- 4 unchanged lines hidden (view full) ---
90reading on the pipe.
91.It AUDITPIPE_GET_QLIMIT_MAX
92Query the highest possible maximum number of records that may be queued for
93reading on the pipe.
94.It AUDITPIPE_FLUSH
95Flush all outstanding records on the audit pipe; useful after setting initial
96preselection properties to delete records queued during the configuration
97process which may not match the interests of the user process.
98.El
99.Ss Audit Pipe Preselection Mode Ioctls
100By default, the audit pipe facility configures pipes to present records
101matched by the system-wide audit trail, configured by
102.Xr auditd 8 .
103However, the preselection mechanism for audit pipes can be configured using
104alternative criteria, including pipe-local flags and naflags settings, as
105well as auid-specific selection masks.
--- 144 unchanged lines hidden ---
2.\" All rights reserved.
3.\"
4.\" Redistribution and use in source and binary forms, with or without
5.\" modification, are permitted provided that the following conditions
6.\" are met:
7.\" 1. Redistributions of source code must retain the above copyright
8.\" notice, this list of conditions and the following disclaimer.
--- 8 unchanged lines hidden (view full) ---
17.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
18.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
19.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
20.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
21.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
22.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
23.\" SUCH DAMAGE.
24.\"
25.\" $FreeBSD: head/share/man/man4/auditpipe.4 159282 2006-06-05 16:31:57Z joel $
26.\"
27.Dd May 5, 2006
28.Os
29.Dt AUDITPIPE 4
30.Sh NAME
31.Nm auditpipe
32.Nd Pseudo-device for live audit event tracking
33.Sh SYNOPSIS
--- 35 unchanged lines hidden (view full) ---
69and
70.Xr poll 2 .
71.Pp
72Applications may choose to track the global audit trail, or configure local
73preselection parameters independent of the global audit trail parameters.
74.Ss Audit Pipe Queue Ioctls
75The following ioctls retrieve and set various audit pipe record queue
76properties:
77.Bl -tag -width AUDITPIPE_GET_QLIMIT_MIN
78.It AUDITPIPE_GET_QLEN
79Query the current number of records available for reading on the pipe.
80.It AUDITPIPE_GET_QLIMIT
81Retrieve the current maximum number of records that may be queued for reading
82on the pipe.
83.It AUDITPIPE_SET_QLIMIT
84Set the current maximum number of records that may be queued for reading on
85the pipe.
--- 4 unchanged lines hidden (view full) ---
90reading on the pipe.
91.It AUDITPIPE_GET_QLIMIT_MAX
92Query the highest possible maximum number of records that may be queued for
93reading on the pipe.
94.It AUDITPIPE_FLUSH
95Flush all outstanding records on the audit pipe; useful after setting initial
96preselection properties to delete records queued during the configuration
97process which may not match the interests of the user process.
98.El
99.Ss Audit Pipe Preselection Mode Ioctls
100By default, the audit pipe facility configures pipes to present records
101matched by the system-wide audit trail, configured by
102.Xr auditd 8 .
103However, the preselection mechanism for audit pipes can be configured using
104alternative criteria, including pipe-local flags and naflags settings, as
105well as auid-specific selection masks.
--- 144 unchanged lines hidden ---