Home | History | Annotate | Download | only in auditd_plugins
      1 /*
      2  * CDDL HEADER START
      3  *
      4  * The contents of this file are subject to the terms of the
      5  * Common Development and Distribution License, Version 1.0 only
      6  * (the "License").  You may not use this file except in compliance
      7  * with the License.
      8  *
      9  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
     10  * or http://www.opensolaris.org/os/licensing.
     11  * See the License for the specific language governing permissions
     12  * and limitations under the License.
     13  *
     14  * When distributing Covered Code, include this CDDL HEADER in each
     15  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
     16  * If applicable, add the following below this CDDL HEADER, with the
     17  * fields enclosed by brackets "[]" replaced with your own identifying
     18  * information: Portions Copyright [yyyy] [name of copyright owner]
     19  *
     20  * CDDL HEADER END
     21  */
     22 /*
     23  * Copyright 2003 Sun Microsystems, Inc.  All rights reserved.
     24  * Use is subject to license terms.
     25  *
     26  * This is an unstable interface; changes may be made without
     27  * notice.
     28  */
     29 
     30 #ifndef	_AUDITD_H
     31 #define	_AUDITD_H
     32 
     33 #pragma ident	"%Z%%M%	%I%	%E% SMI"
     34 
     35 #include <secdb.h>
     36 #include <sys/types.h>
     37 
     38 #ifdef __cplusplus
     39 extern "C" {
     40 #endif
     41 
     42 /*
     43  * "WARN" errors trigger calls to audit_warn
     44  */
     45 enum auditd_rc {
     46 	AUDITD_SUCCESS,	/*   ok						*/
     47 	AUDITD_RETRY,	/*   retry after a delay	(WARN retry)	*/
     48 	AUDITD_NO_MEMORY, /* can't allocate memory	(WARN no_memory) */
     49 	AUDITD_INVALID,	/*   bad input			(WARN invalid)	*/
     50 	AUDITD_COMM_FAIL, /* communications failure			*/
     51 	AUDITD_FATAL,	/*   other error		(WARN failure)	*/
     52 	AUDITD_FAIL	/*   other non-fatal error			*/
     53 };
     54 typedef enum auditd_rc auditd_rc_t;
     55 
     56 /*
     57  * auditd_plugin()
     58  *	arg 1 - input buffer, binary Solaris audit record
     59  *	arg 2 - input buffer length
     60  *	arg 3 - record sequence number
     61  *	arg 4 - optional explanation of error return (use NULL,
     62  *		not an empty string if not used.)
     63  */
     64 auditd_rc_t	auditd_plugin(const char *, size_t, uint32_t, char **);
     65 /*
     66  * auditd_plugin_open()
     67  *	arg 1 - attr/val struct, use with kva_match()
     68  *	arg 2 - attr/value pair string:  attr1=value1;attr2=value2
     69  *	arg 3 - optional explanation of error return (use NULL,
     70  *		not an empty string if not used.)
     71  *
     72  *	make local copy of args 1 and 2; they are trashed after return.
     73  */
     74 auditd_rc_t	auditd_plugin_open(const kva_t *, char **, char **);
     75 
     76 /*
     77  * auditd_plugin_close()
     78  *	arg 1 - optional explanation of error return (use NULL,
     79  *		not an empty string if not used.)
     80  */
     81 auditd_rc_t	auditd_plugin_close(char **);
     82 
     83 #ifdef	__cplusplus
     84 }
     85 #endif
     86 
     87 #endif	/* _AUDITD_H */
     88