Differential D25021 Diff 72301 contrib/openbsm/man/audit.log.5

Changeset View

Standalone View

contrib/openbsm/man/audit.log.5

	Show First 20 Lines • Show All 96 Lines • ▼ Show 20 Lines
	a 64-bit			a 64-bit
	.Dq header			.Dq header
	token can be created using			token can be created using
	.Xr au_to_header64 3 .			.Xr au_to_header64 3 .
	.Bl -column -offset 3n ".No Terminal Address Type/Length" ".No N bytes + 1 NUL"			.Bl -column -offset 3n ".No Terminal Address Type/Length" ".No N bytes + 1 NUL"
	.It Sy "Field Bytes Description"			.It Sy "Field Bytes Description"
	.It "Token ID 1 byte Token ID"			.It "Token ID 1 byte Token ID"
	.It "Record Byte Count 4 bytes Number of bytes in record"			.It "Record Byte Count 4 bytes Number of bytes in record"
	.It "Version Number 2 bytes Record version number"			.It "Version Number 1 byte Record version number"
	.It "Event Type 2 bytes Event type"			.It "Event Type 2 bytes Event type"
	.It "Event Modifier 2 bytes Event sub-type"			.It "Event Modifier 2 bytes Event sub-type"
	.It "Seconds 4/8 bytes Record time stamp (32/64-bits)"			.It "Seconds 4/8 bytes Record time stamp (32/64-bits)"
	.It "Nanoseconds 4/8 bytes Record time stamp (32/64-bits)"			.It "Nanoseconds 4/8 bytes Record time stamp (32/64-bits)"
	.El			.El
	.Ss Expanded Header Token			.Ss Expanded Header Token
	The			The
	.Dq expanded header			.Dq expanded header
	token is an expanded version of the			token is an expanded version of the
	.Dq header			.Dq header
	token, with the addition of a machine IPv4 or IPv6 address.			token, with the addition of a machine IPv4 or IPv6 address.
	A 32-bit extended			A 32-bit extended
	.Dq header			.Dq header
	token can be created using			token can be created using
	.Xr au_to_header32_ex 3 ;			.Xr au_to_header32_ex 3 ;
	a 64-bit extended			a 64-bit extended
	.Dq header			.Dq header
	token can be created using			token can be created using
	.Xr au_to_header64_ex 3 .			.Xr au_to_header64_ex 3 .
	.Bl -column -offset 3n ".No Terminal Address Type/Length" ".No N bytes + 1 NUL"			.Bl -column -offset 3n ".No Terminal Address Type/Length" ".No N bytes + 1 NUL"
	.It Sy "Field Bytes Description"			.It Sy "Field Bytes Description"
	.It "Token ID 1 byte Token ID"			.It "Token ID 1 byte Token ID"
	.It "Record Byte Count 4 bytes Number of bytes in record"			.It "Record Byte Count 4 bytes Number of bytes in record"
	.It "Version Number 2 bytes Record version number"			.It "Version Number 1 byte Record version number"
	.It "Event Type 2 bytes Event type"			.It "Event Type 2 bytes Event type"
	.It "Event Modifier 2 bytes Event sub-type"			.It "Event Modifier 2 bytes Event sub-type"
	.It "Address Type/Length 1 byte Host address type and length"			.It "Address Type/Length 1 byte Host address type and length"
	.It "Machine Address 4/16 bytes IPv4 or IPv6 address"			.It "Machine Address 4/16 bytes IPv4 or IPv6 address"
	.It "Seconds 4/8 bytes Record time stamp (32/64-bits)"			.It "Seconds 4/8 bytes Record time stamp (32/64-bits)"
	.It "Nanoseconds 4/8 bytes Record time stamp (32/64-bits)"			.It "Nanoseconds 4/8 bytes Record time stamp (32/64-bits)"
	.El			.El
	.Ss Trailer Token			.Ss Trailer Token
	▲ Show 20 Lines • Show All 182 Lines • ▼ Show 20 Lines
	.It "Audit ID 4 bytes Audit user ID"			.It "Audit ID 4 bytes Audit user ID"
	.It "Effective User ID 4 bytes Effective user ID"			.It "Effective User ID 4 bytes Effective user ID"
	.It "Effective Group ID 4 bytes Effective group ID"			.It "Effective Group ID 4 bytes Effective group ID"
	.It "Real User ID 4 bytes Real user ID"			.It "Real User ID 4 bytes Real user ID"
	.It "Real Group ID 4 bytes Real group ID"			.It "Real Group ID 4 bytes Real group ID"
	.It "Process ID 4 bytes Process ID"			.It "Process ID 4 bytes Process ID"
	.It "Session ID 4 bytes Audit session ID"			.It "Session ID 4 bytes Audit session ID"
	.It "Terminal Port ID 4/8 bytes Terminal port ID (32/64-bits)"			.It "Terminal Port ID 4/8 bytes Terminal port ID (32/64-bits)"
	.It "Terminal Address Type/Length 1 byte Length of machine address"			.It "Terminal Address Type/Length 4 bytes Length of machine address"
	.It "Terminal Machine Address 4 bytes IPv4 or IPv6 address of machine"			.It "Terminal Machine Address 4 bytes IPv4 or IPv6 address of machine"
	.El			.El
	.Ss Return Token			.Ss Return Token
	The			The
	.Dq return			.Dq return
	token contains a system call or library function return condition, including			token contains a system call or library function return condition, including
	return value and error number associated with the global variable			return value and error number associated with the global variable
	.Er errno .			.Er errno .
	▲ Show 20 Lines • Show All 334 Lines • Show Last 20 Lines