| auditpipe.4 (159282) | auditpipe.4 (161646) |
|---|---|
| 1.\" Copyright (c) 2006 Robert N. M. Watson 2.\" All rights reserved. 3.\" 4.\" Redistribution and use in source and binary forms, with or without 5.\" modification, are permitted provided that the following conditions 6.\" are met: 7.\" 1. Redistributions of source code must retain the above copyright 8.\" notice, this list of conditions and the following disclaimer. --- 8 unchanged lines hidden (view full) --- 17.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 18.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 19.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 20.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 21.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 22.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 23.\" SUCH DAMAGE. 24.\" | 1.\" Copyright (c) 2006 Robert N. M. Watson 2.\" All rights reserved. 3.\" 4.\" Redistribution and use in source and binary forms, with or without 5.\" modification, are permitted provided that the following conditions 6.\" are met: 7.\" 1. Redistributions of source code must retain the above copyright 8.\" notice, this list of conditions and the following disclaimer. --- 8 unchanged lines hidden (view full) --- 17.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 18.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 19.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 20.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 21.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 22.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 23.\" SUCH DAMAGE. 24.\" |
| 25.\" $FreeBSD: head/share/man/man4/auditpipe.4 159282 2006-06-05 16:31:57Z joel $ | 25.\" $FreeBSD: head/share/man/man4/auditpipe.4 161646 2006-08-26 17:59:31Z rwatson $ |
| 26.\" 27.Dd May 5, 2006 28.Os 29.Dt AUDITPIPE 4 30.Sh NAME 31.Nm auditpipe 32.Nd Pseudo-device for live audit event tracking 33.Sh SYNOPSIS --- 35 unchanged lines hidden (view full) --- 69and 70.Xr poll 2 . 71.Pp 72Applications may choose to track the global audit trail, or configure local 73preselection parameters independent of the global audit trail parameters. 74.Ss Audit Pipe Queue Ioctls 75The following ioctls retrieve and set various audit pipe record queue 76properties: | 26.\" 27.Dd May 5, 2006 28.Os 29.Dt AUDITPIPE 4 30.Sh NAME 31.Nm auditpipe 32.Nd Pseudo-device for live audit event tracking 33.Sh SYNOPSIS --- 35 unchanged lines hidden (view full) --- 69and 70.Xr poll 2 . 71.Pp 72Applications may choose to track the global audit trail, or configure local 73preselection parameters independent of the global audit trail parameters. 74.Ss Audit Pipe Queue Ioctls 75The following ioctls retrieve and set various audit pipe record queue 76properties: |
| 77.Bl -tag -width AUDITPIPE_GET_QLIMIT_MIN | 77.Bl -tag -width AUDITPIPE_GET_MAXAUDITDATA |
| 78.It AUDITPIPE_GET_QLEN 79Query the current number of records available for reading on the pipe. 80.It AUDITPIPE_GET_QLIMIT 81Retrieve the current maximum number of records that may be queued for reading 82on the pipe. 83.It AUDITPIPE_SET_QLIMIT 84Set the current maximum number of records that may be queued for reading on 85the pipe. --- 4 unchanged lines hidden (view full) --- 90reading on the pipe. 91.It AUDITPIPE_GET_QLIMIT_MAX 92Query the highest possible maximum number of records that may be queued for 93reading on the pipe. 94.It AUDITPIPE_FLUSH 95Flush all outstanding records on the audit pipe; useful after setting initial 96preselection properties to delete records queued during the configuration 97process which may not match the interests of the user process. | 78.It AUDITPIPE_GET_QLEN 79Query the current number of records available for reading on the pipe. 80.It AUDITPIPE_GET_QLIMIT 81Retrieve the current maximum number of records that may be queued for reading 82on the pipe. 83.It AUDITPIPE_SET_QLIMIT 84Set the current maximum number of records that may be queued for reading on 85the pipe. --- 4 unchanged lines hidden (view full) --- 90reading on the pipe. 91.It AUDITPIPE_GET_QLIMIT_MAX 92Query the highest possible maximum number of records that may be queued for 93reading on the pipe. 94.It AUDITPIPE_FLUSH 95Flush all outstanding records on the audit pipe; useful after setting initial 96preselection properties to delete records queued during the configuration 97process which may not match the interests of the user process. |
| 98.It AUDITPIPE_GET_MAXAUDITDATA 99Query the maximum size of an audit record, which is a useful minimum size for 100a user space buffer intended to hold audit records read from the audit pipe. |
|
| 98.El 99.Ss Audit Pipe Preselection Mode Ioctls 100By default, the audit pipe facility configures pipes to present records 101matched by the system-wide audit trail, configured by 102.Xr auditd 8 . 103However, the preselection mechanism for audit pipes can be configured using 104alternative criteria, including pipe-local flags and naflags settings, as 105well as auid-specific selection masks. --- 144 unchanged lines hidden --- | 101.El 102.Ss Audit Pipe Preselection Mode Ioctls 103By default, the audit pipe facility configures pipes to present records 104matched by the system-wide audit trail, configured by 105.Xr auditd 8 . 106However, the preselection mechanism for audit pipes can be configured using 107alternative criteria, including pipe-local flags and naflags settings, as 108well as auid-specific selection masks. --- 144 unchanged lines hidden --- |