cmd/praudit/format.c

4  * The contents of this file are subject to the terms of the
23  * Use is subject to license terms.
113  *		  Print a newline, if needed according to various formatting
282  *		  Calls the routine corresponding to the tag
283  *		  Note that to use this mechanism, all such routines must
966  * This routine is called to determine the field width for the
968  * to be printed in more than one line.  The field width can be
1019 	 * We need to know how much space to allocate for our string, so
1020 	 * read the length first, then call pr_adr_char to read those bytes.
1045  * pa_adr_byte	: Issues pr_adr_char to retrieve the next ADR item from
1046  *		  the input stream pointed to by audit_adr, and prints it
1071  * pa_adr_charhex: Issues pr_adr_char to retrieve the next ADR item from
1072  *			the input stream pointed to by audit_adr, and prints it
1104  * pa_adr_int32	: Issues pr_adr_int32 to retrieve the next ADR item from the
1105  *		  input stream pointed to by audit_adr, and prints it
1133  * pa_adr_int64	: Issues pr_adr_int64 to retrieve the next ADR item from the
1134  *		  input stream pointed to by audit_adr, and prints it
1159  * pa_adr_int64hex: Issues pr_adr_int64 to retrieve the next ADR item from the
1160  *			input stream pointed to by audit_adr, and prints it
1186  * pa_adr_int64hex: Issues pr_adr_int64 to retrieve the next ADR item from the
1187  *			input stream pointed to by audit_adr, and prints it
1214  * bu2string: Maps a print basic unit type to a string.
1251  * eventmodifier2string: Maps event modifier flags to a readable string.
1276 		{ (int)PAD_WRITE,	"wr" },	/* data written to object */
1299  *   Converts a byte to string depending on the print mode
1302  *		  c, which is the byte to convert
1303  * output	: p, which is a pointer to the location where
1304  *		  the resulting string is to be stored
1335  * Converts a short integer to string depending on the print mode
1338  *		c, which is the short integer to convert
1339  * output	: p, which is a pointer to the location where
1340  *		the resulting string is to be stored
1370  * Converts a integer to string depending on the print mode
1373  *		c, which is the integer to convert
1374  * output	: p, which is a pointer to the location where
1375  *		the resulting string is to be stored
1397  * Converts a integer to string depending on the print mode
1400  *		c, which is the integer to convert
1401  * output	: p, which is a pointer to the location where
1402  *		the resulting string is to be stored
1426  * and returns it into the position pointed to by p
1440 	/* first convert to binary */
1458 	/* now copy the contents of s to p */
1476  * hexconvert	: Converts a string of (size) bytes to hexadecimal, and
1479  *		- pointer to the hexadecimal string if successful
1534  * htp2string: Maps a print suggestion to a string.
1570  * pa_adr_short: Issues pr_adr_short to retrieve the next ADR item from the
1571  *		input stream pointed to by audit_adr, and prints it
1596  * pa_adr_shorthex: Issues pr_adr_short to retrieve the next ADR item from the
1597  *			input stream pointed to by audit_adr, and prints it
1643 	 * We need to know how much space to allocate for our string, so
1644 	 * read the length first, then call pr_adr_char to read those bytes.
1683 	 * We need to know how much space to allocate for our string, so
1684 	 * read the length first, then call pr_adr_char to read those bytes.
1728 		 * Unprintable chars should always be converted to the
1873  * pa_adr_u_int32: Issues pr_adr_u_int32 to retrieve the next ADR item from
1874  *		  the input stream pointed to by audit_adr, and prints it
1903  * pa_adr_u_int64: Issues pr_adr_u_int64 to retrieve the next ADR item from the
1904  *		  input stream pointed to by audit_adr, and prints it
1930  * pa_adr_u_short: Issues pr_adr_u_short to retrieve the next ADR item from
1931  *			the input stream pointed to by audit_adr, and prints it
1956  * pa_reclen: Issues pr_adr_u_long to retrieve the length of the record
1957  *		  from the input stream pointed to by audit_adr,
1989  * pa_mode	: Issues pr_adr_u_short to retrieve the next ADR item from
1990  *		the input stream pointed to by audit_adr, and prints it
2046  * pa_pw_uid()	: Issues pr_adr_u_int32 to reads uid from input stream
2047  *		pointed to by audit_adr, and displays it in either
2102  * pa_gr_uid()	: Issues pr_adr_u_int32 to reads group uid from input stream
2103  *			pointed to by audit_adr, and displays it in either
2128  * pa_pw_uid_gr_gid()	: Issues pr_adr_u_int32 to reads uid or group uid
2130  *			pointed to by audit_adr, and displays it in either
2166 	 * The "mask" and "other" strings refer to the class mask
2168 	 * The "unrecognized" string refers to an unrecognized ACL
2244  * pa_event_modifier(): Issues pr_adr_u_short to retrieve the next ADR item from
2245  *		  the input stream pointed to by audit_adr.  This is the
2297  * pa_event_type(): Issues pr_adr_u_short to retrieve the next ADR item from
2298  *		  the input stream pointed to by audit_adr.  This is the
2348  * Print time from struct timeval to millisecond resolution.
2362 	uint32_t scale = 1000;		/* usec to msec */
2368  * Print time from timestruc_t to millisecond resolution.
2379 	uint32_t scale = 1000000;	/* nsec to msec */
2442  * Format time and print relative to scale factor from micro/nano seconds.
2498  * Print time from struct timeval to millisecond resolution.
2512 	uint64_t scale = 1000;		/* usec to msec */
2518  * Print time from timestruc_t to millisecond resolution.
2529 	uint64_t scale = 1000000;	/* nsec to msec */
2548  * Format time and print relative to scale factor from micro/nano seconds.
2654  *			< ADT_FAIL_VALUE, supposed to be an errno.
2737  * 		: flag - indicates whether to output a new line for
2846 	char to;
2862  * Convert binary data to ASCII for printing.
2876 						*p++ = cntrl_map[j].to;
2927  * pa_liaison : Issues pr_adr_char to retrieve the next ADR item from the
2928  *			input stream pointed to by audit_adr, and prints it
2964  * pa_xid : Issues pr_adr_int32 to retrieve the XID from the input
2965  *	      stream pointed to by audit_adr, and prints it if
3015 	 * ace->a_flags refers to access flags of ZFS/NFSv4 ACL entry.
3060 	 * ace->a_who refers to user id or group id of ZFS/NFSv4 ACL entry.
3080  * Appends what to str, (re)allocating str if necessary.
3129 	 * ace->a_access_mask refers to access mask of ZFS/NFSv4 ACL entry.
3173 		 * because we don't know if the acl belongs to a file
3263 	 * ace->a_type refers to access type of ZFS/NFSv4 ACL entry.