cmd/auditconfig/auditconfig.c

212 static void do_args(char **argv, au_mask_t *mask);
245 static void do_setclass(char *event_str, au_mask_t *mask);
249 static void do_setpmask(char *pid_str, au_mask_t *mask);
250 static void do_setsmask(char *asid_str, au_mask_t *mask);
251 static void do_setumask(char *auid_str, au_mask_t *mask);
264 static void echkflags(char *auditflags, au_mask_t *mask);
275 static void parse_args(int argc, char **argv, au_mask_t *mask);
289 	au_mask_t mask;			/* for options manipulating flags */
305 	parse_args(argc, argv, &mask);
306 	do_args(argv, &mask);
320 parse_args(int argc, char **argv, au_mask_t *mask)
454 			echkflags(*argv, mask);
462 			echkflags(*argv, mask);
469 			echkflags(*argv, mask);
477 			echkflags(*argv, mask);
527 			echkflags(*argv, mask);
599 			echkflags(*argv, mask);
627 do_args(char **argv, au_mask_t *mask)
835 				do_setclass(event_str, mask);
843 			do_setflags(*argv, mask);
848 			do_setkmask(mask);
853 			do_setnaflags(*argv, mask);
906 				do_setpmask(pid_str, mask);
953 				do_setsmask(asid_str, mask);
964 				do_setumask(auid_str, mask);
1072  * do_chkaconf() - report a mismatch if the runtime class mask of a kernel audit
1073  * event does not match the configured class mask. The value returned to the
1095 			    gettext("bad kernel non-attributable mask\n"));
1125 	(void) printf(gettext("Configured non-attributable event mask.\n"));
1234 	print_mask(gettext("process preselection mask"), &ai.ai_mask);
1249 	print_mask(gettext("process preselection mask"), &ai.ai_mask);
1284  * do_getclass() - print the preselection mask associated with the specified
1314 	(void) printf(gettext("audit class mask for event %s(%hu) = 0x%x\n"),
1422  * do_getpinfo() - print the audit ID, preselection mask, terminal ID, and
1438 	print_mask(gettext("process preselection mask"), &(ap.ap_mask));
1812  * do_setpmask() - set the preselection mask of the specified process; valid
1816 do_setpmask(char *pid_str, au_mask_t *mask)
1826 	ap.ap_mask.am_success = mask->am_success;
1827 	ap.ap_mask.am_failure = mask->am_failure;
1833  * do_setsmask() - set the preselection mask of all processes with the specified
1838 do_setsmask(char *asid_str, au_mask_t *mask)
1848 	ainfo.ai_mask.am_success = mask->am_success;
1849 	ainfo.ai_mask.am_failure = mask->am_failure;
1855  * do_setumask() -  set the preselection mask of all processes with the
1860 do_setumask(char *auid_str, au_mask_t *mask)
1870 	ainfo.ai_mask.am_success = mask->am_success;
1871 	ainfo.ai_mask.am_failure = mask->am_failure;
1903  * audit flags (mask); valid per zone if AUDIT_PERZONE is set, else only in
1907 do_setclass(char *event_str, au_mask_t *mask)
1922 	ec.ec_class = (mask->am_success | mask->am_failure);
2222 echkflags(char *auditflags, au_mask_t *mask)
2227 	if (!__chkflags(auditflags, mask, B_FALSE, &err)) {
2474 	/* reuse policy mask if already set to some value */