bsd/bsm/audit_klib.h

   1 /*
   2  * @APPLE_LICENSE_OSREFERENCE_HEADER_START@
   3  *
   4  * This file contains Original Code and/or Modifications of Original Code
   5  * as defined in and that are subject to the Apple Public Source License
   6  * Version 2.0 (the 'License'). You may not use this file except in
   7  * compliance with the License.  The rights granted to you under the
   8  * License may not be used to create, or enable the creation or
   9  * redistribution of, unlawful or unlicensed copies of an Apple operating
  10  * system, or to circumvent, violate, or enable the circumvention or
  11  * violation of, any terms of an Apple operating system software license
  12  * agreement.
  13  *
  14  * Please obtain a copy of the License at
  15  * http://www.opensource.apple.com/apsl/ and read it before using this
  16  * file.
  17  *
  18  * The Original Code and all software distributed under the License are
  19  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
  20  * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
  21  * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
  22  * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
  23  * Please see the License for the specific language governing rights and
  24  * limitations under the License.
  25  *
  26  * @APPLE_LICENSE_OSREFERENCE_HEADER_END@
  27  */
  28
  29 #ifndef _BSM_AUDIT_KLIB_H_
  30 #define _BSM_AUDIT_KLIB_H_
  31
  32 #define AU_PRS_SUCCESS  1
  33 #define AU_PRS_FAILURE  2
  34 #define AU_PRS_BOTH     (AU_PRS_SUCCESS|AU_PRS_FAILURE)
  35
  36 #ifdef KERNEL
  37 #include <bsm/audit_kernel.h>
  38 /*
  39  * Some of the BSM tokenizer functions take different parameters in the
  40  * kernel implementations in order to save the copying of large kernel
  41  * data structures. The prototypes of these functions are declared here.
  42  */
  43 token_t *kau_to_socket(struct socket_au_info *soi);
  44 token_t *kau_to_attr32(struct vnode_au_info *vni);
  45 token_t *kau_to_attr64(struct vnode_au_info *vni);
  46 int auditon_command_event(int cmd);
  47 int au_preselect(au_event_t event, au_mask_t *mask_p, int sorf);
  48 au_event_t flags_and_error_to_openevent(int oflags, int error);
  49 au_event_t ctlname_to_sysctlevent(int name[], uint64_t valid_arg);
  50 au_event_t msgctl_to_event(int cmd);
  51 au_event_t semctl_to_event(int cmd);
  52 void au_evclassmap_init(void);
  53 void au_evclassmap_insert(au_event_t event, au_class_t class);
  54 au_class_t au_event_class(au_event_t event);
  55
  56 int canon_path(struct proc *p, char *path, char *cpath);
  57
  58
  59
  60
  61 /*
  62  * Define a system call to audit event mapping table.
  63  */
  64 extern au_event_t sys_au_event[];
  65 extern int nsys_au_event;       /* number of entries in this table */
  66
  67 #endif /*KERNEL*/
  68
  69 #endif /* ! _BSM_AUDIT_KLIB_H_ */