Differential D15620 Diff 43148 share/man/man4/auditpipe.4

Changeset View

Standalone View

share/man/man4/auditpipe.4

	Show First 20 Lines • Show All 148 Lines • ▼ Show 20 Lines
	.It Dv AUDITPIPE_GET_PRESELECT_FLAGS			.It Dv AUDITPIPE_GET_PRESELECT_FLAGS
	Retrieve the current default preselection flags for attributable events on			Retrieve the current default preselection flags for attributable events on
	the pipe.			the pipe.
	These flags correspond to the			These flags correspond to the
	.Va flags			.Va flags
	field in			field in
	.Xr audit_control 5 .			.Xr audit_control 5 .
	The ioctl argument should be of type			The ioctl argument should be of type
	.Vt u_int .			.Vt au_mask_t .
	.It Dv AUDITPIPE_SET_PRESELECT_FLAGS			.It Dv AUDITPIPE_SET_PRESELECT_FLAGS
	Set the current default preselection flags for attributable events on the			Set the current default preselection flags for attributable events on the
	pipe.			pipe.
	These flags correspond to the			These flags correspond to the
	.Va flags			.Va flags
	field in			field in
	.Xr audit_control 5 .			.Xr audit_control 5 .
	The ioctl argument should be of type			The ioctl argument should be of type
	.Vt u_int .			.Vt au_mask_t .
	.It Dv AUDITPIPE_GET_PRESELECT_NAFLAGS			.It Dv AUDITPIPE_GET_PRESELECT_NAFLAGS
	Retrieve the current default preselection flags for non-attributable events			Retrieve the current default preselection flags for non-attributable events
	on the pipe.			on the pipe.
	These flags correspond to the			These flags correspond to the
	.Va naflags			.Va naflags
	field in			field in
	.Xr audit_control 5 .			.Xr audit_control 5 .
	The ioctl argument should be of type			The ioctl argument should be of type
	.Vt u_int .			.Vt au_mask_t .
	.It Dv AUDITPIPE_SET_PRESELECT_NAFLAGS			.It Dv AUDITPIPE_SET_PRESELECT_NAFLAGS
	Set the current default preselection flags for non-attributable events on the			Set the current default preselection flags for non-attributable events on the
	pipe.			pipe.
	These flags correspond to the			These flags correspond to the
	.Va naflags			.Va naflags
	field in			field in
	.Xr audit_control 5 .			.Xr audit_control 5 .
	The ioctl argument should be of type			The ioctl argument should be of type
	.Vt u_int .			.Vt au_mask_t .
	.It Dv AUDITPIPE_GET_PRESELECT_AUID			.It Dv AUDITPIPE_GET_PRESELECT_AUID
	Query the current preselection masks for a specific auid on the pipe.			Query the current preselection masks for a specific auid on the pipe.
	The ioctl argument should be of type			The ioctl argument should be of type
	.Vt "struct auditpipe_ioctl_preselect" .			.Vt "struct auditpipe_ioctl_preselect" .
	The auid to query is specified via the			The auid to query is specified via the
	.Va ap_auid			.Va ap_auid
	field of type			field of type
	.Vt au_id_t ;			.Vt au_id_t ;
	▲ Show 20 Lines • Show All 47 Lines • ▼ Show 20 Lines
	stream format were defined by Sun Microsystems.			stream format were defined by Sun Microsystems.
	.Sh BUGS			.Sh BUGS
	See the			See the
	.Xr audit 4			.Xr audit 4
	manual page for information on audit-related bugs and limitations.			manual page for information on audit-related bugs and limitations.
	.Pp			.Pp
	The configurable preselection mechanism mirrors the selection model present			The configurable preselection mechanism mirrors the selection model present
	for the global audit trail.			for the global audit trail.
	It might be desirable to provided a more flexible selection model.			It might be desirable to provide a more flexible selection model.
	.Pp			.Pp
	The per-pipe audit event queue is fifo, with drops occurring if either the			The per-pipe audit event queue is fifo, with drops occurring if either the
	user thread provides in sufficient for the record on the queue head, or on			user thread provides in sufficient for the record on the queue head, or on
	enqueue if there is insufficient room.			enqueue if there is insufficient room.
	It might be desirable to support partial reads of records, which would be			It might be desirable to support partial reads of records, which would be
	more compatible with buffered I/O as implemented in system libraries, and to			more compatible with buffered I/O as implemented in system libraries, and to
	allow applications to select which records are dropped, possibly in the style			allow applications to select which records are dropped, possibly in the style
	of preselection.			of preselection.