]>
Commit | Line | Data |
---|---|---|
de355530 | 1 | /* |
8ad349bb | 2 | * @APPLE_LICENSE_OSREFERENCE_HEADER_START@ |
37839358 | 3 | * |
8ad349bb A |
4 | * This file contains Original Code and/or Modifications of Original Code |
5 | * as defined in and that are subject to the Apple Public Source License | |
6 | * Version 2.0 (the 'License'). You may not use this file except in | |
7 | * compliance with the License. The rights granted to you under the | |
8 | * License may not be used to create, or enable the creation or | |
9 | * redistribution of, unlawful or unlicensed copies of an Apple operating | |
10 | * system, or to circumvent, violate, or enable the circumvention or | |
11 | * violation of, any terms of an Apple operating system software license | |
12 | * agreement. | |
13 | * | |
14 | * Please obtain a copy of the License at | |
15 | * http://www.opensource.apple.com/apsl/ and read it before using this | |
43866e37 | 16 | * file. |
8ad349bb A |
17 | * |
18 | * The Original Code and all software distributed under the License are | |
19 | * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER | |
20 | * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, | |
21 | * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, | |
22 | * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. | |
23 | * Please see the License for the specific language governing rights and | |
43866e37 | 24 | * limitations under the License. |
8ad349bb A |
25 | * |
26 | * @APPLE_LICENSE_OSREFERENCE_HEADER_END@ | |
de355530 | 27 | */ |
de355530 | 28 | |
e5568f75 A |
29 | #ifndef _BSM_AUDIT_KLIB_H_ |
30 | #define _BSM_AUDIT_KLIB_H_ | |
de355530 | 31 | |
55e303ae A |
32 | #define AU_PRS_SUCCESS 1 |
33 | #define AU_PRS_FAILURE 2 | |
34 | #define AU_PRS_BOTH (AU_PRS_SUCCESS|AU_PRS_FAILURE) | |
de355530 | 35 | |
55e303ae | 36 | #ifdef KERNEL |
e5568f75 A |
37 | #include <bsm/audit_kernel.h> |
38 | /* | |
39 | * Some of the BSM tokenizer functions take different parameters in the | |
40 | * kernel implementations in order to save the copying of large kernel | |
41 | * data structures. The prototypes of these functions are declared here. | |
42 | */ | |
43 | token_t *kau_to_socket(struct socket_au_info *soi); | |
44 | token_t *kau_to_attr32(struct vnode_au_info *vni); | |
45 | token_t *kau_to_attr64(struct vnode_au_info *vni); | |
91447636 | 46 | int auditon_command_event(int cmd); |
55e303ae | 47 | int au_preselect(au_event_t event, au_mask_t *mask_p, int sorf); |
e5568f75 | 48 | au_event_t flags_and_error_to_openevent(int oflags, int error); |
91447636 A |
49 | au_event_t ctlname_to_sysctlevent(int name[], uint64_t valid_arg); |
50 | au_event_t msgctl_to_event(int cmd); | |
51 | au_event_t semctl_to_event(int cmd); | |
52 | void au_evclassmap_init(void); | |
e5568f75 A |
53 | void au_evclassmap_insert(au_event_t event, au_class_t class); |
54 | au_class_t au_event_class(au_event_t event); | |
55 | ||
56 | int canon_path(struct proc *p, char *path, char *cpath); | |
91447636 A |
57 | |
58 | ||
59 | ||
60 | ||
55e303ae A |
61 | /* |
62 | * Define a system call to audit event mapping table. | |
63 | */ | |
64 | extern au_event_t sys_au_event[]; | |
65 | extern int nsys_au_event; /* number of entries in this table */ | |
de355530 | 66 | |
55e303ae | 67 | #endif /*KERNEL*/ |
de355530 | 68 | |
e5568f75 | 69 | #endif /* ! _BSM_AUDIT_KLIB_H_ */ |