X-Git-Url: https://git.saurik.com/apple/xnu.git/blobdiff_plain/b0d623f7f2ae71ed96e60569f61f9a9a27016e80..eee3565979933af707c711411001ba11fe406a3c:/bsd/security/audit/audit_ioctl.h

diff --git a/bsd/security/audit/audit_ioctl.h b/bsd/security/audit/audit_ioctl.h
index 806f8ae93..1059532b9 100644
--- a/bsd/security/audit/audit_ioctl.h
+++ b/bsd/security/audit/audit_ioctl.h
@@ -31,6 +31,7 @@
 #define	_SECURITY_AUDIT_AUDIT_IOCTL_H_
 
 #define	AUDITPIPE_IOBASE	'A'
+#define	AUDITSDEV_IOBASE	'S'
 
 /*
  * Data structures used for complex ioctl arguments.  Do not change existing
@@ -79,4 +80,28 @@ struct auditpipe_ioctl_preselect {
 #define	AUDITPIPE_GET_DROPS		_IOR(AUDITPIPE_IOBASE, 102, u_int64_t)
 #define	AUDITPIPE_GET_TRUNCATES		_IOR(AUDITPIPE_IOBASE, 103, u_int64_t)
 
+/*
+ * Ioctls for the audit session device.
+ */
+#define	AUDITSDEV_GET_QLEN		_IOR(AUDITSDEV_IOBASE, 1, u_int)
+#define	AUDITSDEV_GET_QLIMIT		_IOR(AUDITSDEV_IOBASE, 2, u_int)
+#define	AUDITSDEV_SET_QLIMIT		_IOW(AUDITSDEV_IOBASE, 3, u_int)
+#define	AUDITSDEV_GET_QLIMIT_MIN	_IOR(AUDITSDEV_IOBASE, 4, u_int)
+#define	AUDITSDEV_GET_QLIMIT_MAX	_IOR(AUDITSDEV_IOBASE, 5, u_int)
+#define	AUDITSDEV_FLUSH			_IO(AUDITSDEV_IOBASE, 6)
+#define	AUDITSDEV_GET_MAXDATA		_IOR(AUDITSDEV_IOBASE, 7, u_int)
+
+/*
+ * Ioctls to retrieve and set the ALLSESSIONS flag in the audit session device.
+ */
+#define	AUDITSDEV_GET_ALLSESSIONS	_IOR(AUDITSDEV_IOBASE, 100, u_int)
+#define	AUDITSDEV_SET_ALLSESSIONS	_IOW(AUDITSDEV_IOBASE, 101, u_int)
+
+/*
+ * Ioctls to retrieve audit sessions device statistics.
+ */
+#define	AUDITSDEV_GET_INSERTS		_IOR(AUDITSDEV_IOBASE, 200, u_int64_t)
+#define	AUDITSDEV_GET_READS		_IOR(AUDITSDEV_IOBASE, 201, u_int64_t)
+#define	AUDITSDEV_GET_DROPS		_IOR(AUDITSDEV_IOBASE, 202, u_int64_t)
+
 #endif /* _SECURITY_AUDIT_AUDIT_IOCTL_H_ */