bsd/bsm/audit_record.h

191 int	 au_write(int d, token_t *m);
194 int	 au_close_token(token_t *tok, u_char *buffer, size_t *buflen);
196 token_t	*au_to_file(const char *file, struct timeval tm);
198 token_t	*au_to_header32_tm(int rec_size, au_event_t e_type, au_emod_t e_mod,
200 token_t	*au_to_header32_ex_tm(int rec_size, au_event_t e_type, au_emod_t e_mod,
202 token_t	*au_to_header64_tm(int rec_size, au_event_t e_type, au_emod_t e_mod,
205 token_t	*au_to_header(int rec_size, au_event_t e_type, au_emod_t e_mod);
206 token_t	*au_to_header_ex(int rec_size, au_event_t e_type, au_emod_t e_mod);
207 token_t	*au_to_header32(int rec_size, au_event_t e_type, au_emod_t e_mod);
208 token_t	*au_to_header64(int rec_size, au_event_t e_type, au_emod_t e_mod);
209 token_t	*au_to_header32_ex(int rec_size, au_event_t e_type, au_emod_t e_mod);
212 token_t	*au_to_me(void);
213 token_t	*au_to_arg(char n, const char *text, uint32_t v);
214 token_t	*au_to_arg32(char n, const char *text, uint32_t v);
215 token_t	*au_to_arg64(char n, const char *text, uint64_t v);
218 token_t	*au_to_attr(struct vnode_au_info *vni);
219 token_t	*au_to_attr32(struct vnode_au_info *vni);
220 token_t	*au_to_attr64(struct vnode_au_info *vni);
223 token_t	*au_to_data(char unit_print, char unit_type, char unit_count,
225 token_t	*au_to_exit(int retval, int err);
226 token_t	*au_to_groups(int *groups);
227 token_t	*au_to_newgroups(uint16_t n, gid_t *groups);
228 token_t	*au_to_in_addr(struct in_addr *internet_addr);
229 token_t	*au_to_in_addr_ex(struct in6_addr *internet_addr);
230 token_t	*au_to_ip(struct ip *ip);
231 token_t	*au_to_ipc(char type, int id);
232 token_t	*au_to_ipc_perm(struct ipc_perm *perm);
233 token_t	*au_to_iport(uint16_t iport);
234 token_t	*au_to_opaque(const char *data, uint16_t bytes);
235 token_t	*au_to_path(const char *path);
236 token_t	*au_to_process(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid,
238 token_t	*au_to_process32(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid,
240 token_t	*au_to_process64(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid,
242 token_t	*au_to_process_ex(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid,
244 token_t	*au_to_process32_ex(au_id_t auid, uid_t euid, gid_t egid,
247 token_t	*au_to_process64_ex(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid,
249 token_t	*au_to_return(char status, uint32_t ret);
250 token_t	*au_to_return32(char status, uint32_t ret);
251 token_t	*au_to_return64(char status, uint64_t ret);
252 token_t	*au_to_seq(long audit_count);
253 token_t	*au_to_socket_ex(u_short so_domain, u_short so_type,
255 token_t	*au_to_sock_inet(struct sockaddr_in *so);
256 token_t	*au_to_sock_inet32(struct sockaddr_in *so);
257 token_t	*au_to_sock_inet128(struct sockaddr_in6 *so);
258 token_t	*au_to_sock_unix(struct sockaddr_un *so);
259 token_t	*au_to_subject(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid,
261 token_t	*au_to_subject32(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid,
263 token_t	*au_to_subject64(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid,
265 token_t	*au_to_subject_ex(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid,
267 token_t	*au_to_subject32_ex(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid,
269 token_t	*au_to_subject64_ex(au_id_t auid, uid_t euid, gid_t egid, uid_t ruid,
272 token_t	*au_to_exec_args(char *args, int argc);
273 token_t	*au_to_exec_env(char *envs, int envc);
275 token_t	*au_to_exec_args(char **argv);
276 token_t	*au_to_exec_env(char **envp);
278 token_t	*au_to_text(const char *text);
279 token_t	*au_to_kevent(struct kevent *kev);
280 token_t	*au_to_trailer(int rec_size);
281 token_t	*au_to_zonename(const char *zonename);