]> git.saurik.com Git - apple/xnu.git/blame - bsd/bsm/audit_klib.h
xnu-792.13.8.tar.gz
[apple/xnu.git] / bsd / bsm / audit_klib.h
CommitLineData
de355530 1/*
8ad349bb 2 * @APPLE_LICENSE_OSREFERENCE_HEADER_START@
37839358 3 *
8ad349bb
A
4 * This file contains Original Code and/or Modifications of Original Code
5 * as defined in and that are subject to the Apple Public Source License
6 * Version 2.0 (the 'License'). You may not use this file except in
7 * compliance with the License. The rights granted to you under the
8 * License may not be used to create, or enable the creation or
9 * redistribution of, unlawful or unlicensed copies of an Apple operating
10 * system, or to circumvent, violate, or enable the circumvention or
11 * violation of, any terms of an Apple operating system software license
12 * agreement.
13 *
14 * Please obtain a copy of the License at
15 * http://www.opensource.apple.com/apsl/ and read it before using this
43866e37 16 * file.
8ad349bb
A
17 *
18 * The Original Code and all software distributed under the License are
19 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
20 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
21 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
22 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
23 * Please see the License for the specific language governing rights and
43866e37 24 * limitations under the License.
8ad349bb
A
25 *
26 * @APPLE_LICENSE_OSREFERENCE_HEADER_END@
de355530 27 */
de355530 28
e5568f75
A
29#ifndef _BSM_AUDIT_KLIB_H_
30#define _BSM_AUDIT_KLIB_H_
de355530 31
55e303ae
A
32#define AU_PRS_SUCCESS 1
33#define AU_PRS_FAILURE 2
34#define AU_PRS_BOTH (AU_PRS_SUCCESS|AU_PRS_FAILURE)
de355530 35
55e303ae 36#ifdef KERNEL
e5568f75
A
37#include <bsm/audit_kernel.h>
38/*
39 * Some of the BSM tokenizer functions take different parameters in the
40 * kernel implementations in order to save the copying of large kernel
41 * data structures. The prototypes of these functions are declared here.
42 */
43token_t *kau_to_socket(struct socket_au_info *soi);
44token_t *kau_to_attr32(struct vnode_au_info *vni);
45token_t *kau_to_attr64(struct vnode_au_info *vni);
91447636 46int auditon_command_event(int cmd);
55e303ae 47int au_preselect(au_event_t event, au_mask_t *mask_p, int sorf);
e5568f75 48au_event_t flags_and_error_to_openevent(int oflags, int error);
91447636
A
49au_event_t ctlname_to_sysctlevent(int name[], uint64_t valid_arg);
50au_event_t msgctl_to_event(int cmd);
51au_event_t semctl_to_event(int cmd);
52void au_evclassmap_init(void);
e5568f75
A
53void au_evclassmap_insert(au_event_t event, au_class_t class);
54au_class_t au_event_class(au_event_t event);
55
56int canon_path(struct proc *p, char *path, char *cpath);
91447636
A
57
58
59
60
55e303ae
A
61/*
62 * Define a system call to audit event mapping table.
63 */
64extern au_event_t sys_au_event[];
65extern int nsys_au_event; /* number of entries in this table */
de355530 66
55e303ae 67#endif /*KERNEL*/
de355530 68
e5568f75 69#endif /* ! _BSM_AUDIT_KLIB_H_ */