data structure is defined as follows:
.nf
.in +4n
-
struct auditinfo {
au_id_t ai_auid; /* Audit user ID */
au_mask_t ai_mask; /* Audit masks */
.Fa ai_auid
variable contains the audit identifier which is recorded in the audit log for
each event the process caused.
-.PP
-
+.Pp
The
.Fa au_mask_t
data structure defines the bit mask for auditing successful and failed events
out of the predefined list of event classes. It is defined as follows:
.nf
.in +4n
-
struct au_mask {
unsigned int am_success; /* success bits */
unsigned int am_failure; /* failure bits */
typedef struct au_mask au_mask_t;
.in
.fi
-.PP
-
+.Pp
The
.Fa au_termid_t
data structure defines the Terminal ID recorded with every event caused by the
process. It is defined as follows:
.nf
.in +4n
-
struct au_tid {
dev_t port;
u_int32_t machine;
typedef struct au_tid au_tid_t;
.in
.fi
-.PP
-
+.Pp
The
.Fa ai_asid
variable contains the audit session ID which is recorded with every event
in IP version 6. It is defined as follows:
.nf
.in +4n
-
struct auditinfo_addr {
au_id_t ai_auid; /* Audit user ID. */
au_mask_t ai_mask; /* Audit masks. */
.in
.fi
.Pp
-
The
.Fa au_tid_addr_t
data structure which includes a larger address storage field and an additional
field with the type of address stored:
.nf
.in +4n
-
struct au_tid_addr {
dev_t at_port;
u_int32_t at_type;