usr/src/lib/auditd_plugins/syslog/sysplugin.h

   1 /*
   2  * CDDL HEADER START
   3  *
   4  * The contents of this file are subject to the terms of the
   5  * Common Development and Distribution License, Version 1.0 only
   6  * (the "License").  You may not use this file except in compliance
   7  * with the License.
   8  *
   9  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
  10  * or http://www.opensolaris.org/os/licensing.
  11  * See the License for the specific language governing permissions
  12  * and limitations under the License.
  13  *
  14  * When distributing Covered Code, include this CDDL HEADER in each
  15  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
  16  * If applicable, add the following below this CDDL HEADER, with the
  17  * fields enclosed by brackets "[]" replaced with your own identifying
  18  * information: Portions Copyright [yyyy] [name of copyright owner]
  19  *
  20  * CDDL HEADER END
  21  */
  22 /*
  23  * Copyright 2003 Sun Microsystems, Inc.  All rights reserved.
  24  * Use is subject to license terms.
  25  */
  26
  27 #ifndef _SYSPLUGIN_H
  28 #define _SYSPLUGIN_H
  29
  30 #pragma ident   "%Z%%M% %I%     %E% SMI"
  31
  32 #ifdef __cplusplus
  33 extern "C" {
  34 #endif
  35
  36 #include <sys/types.h>
  37 #include <bsm/audit.h>
  38
  39 struct selected_fields {
  40         /* from header token */
  41         au_event_t      sf_eventid;     /* 0 if no value */
  42         uint32_t        sf_reclen;      /* 0 if no value */
  43
  44         /* from exit or return token */
  45         int             sf_pass;        /* 0 no value, -1 fail, 1 pass */
  46
  47         /* from subject token */
  48         uint32_t        sf_asid;        /* 0 no value */
  49         uid_t           sf_auid;        /* -2 no value, > -1 otherwise */
  50         uid_t           sf_euid;        /* -2 no value, > -1 otherwise */
  51         gid_t           sf_egid;        /* -2 no value, > -1 otherwise */
  52         au_tid_addr_t   sf_tid;         /* tid.at_type = 0 no value */
  53
  54         /* from process token */
  55         uid_t           sf_pauid;       /* -2 no value */
  56         uid_t           sf_peuid;       /* -2 no value */
  57
  58         /* data that may be truncated goes after this point */
  59
  60         /* from uauth token */
  61         size_t          sf_uauthlen;
  62         char            *sf_uauth;      /* NULL no value */
  63
  64         /* from text token */
  65         size_t          sf_textlen;
  66         char            *sf_text;       /* NULL no value */
  67
  68         /* from path and atpath token */
  69         size_t          sf_pathlen;
  70         char            *sf_path;               /* NULL no value */
  71         size_t          sf_atpathlen;
  72         char            *sf_atpath;     /* NULL no value */
  73
  74         /* from sequence token */
  75         int32_t         sf_sequence;    /* -1 no value */
  76
  77         /* from zonename token */
  78         size_t          sf_zonelen;
  79         char            *sf_zonename;   /* NULL no value */
  80 };
  81 typedef struct selected_fields tosyslog_t;
  82
  83
  84 #ifdef __cplusplus
  85 }
  86 #endif
  87
  88 #endif  /* _SYSPLUGIN_H */