[−][src]Module coreutils_core::os::audit

Module of audit session compability for FreeBSD and MacOS.

I got the info from FreeBSD man pages GETAUDIT(2) the names defined on GETAUDIT(2) will have a '¹' on them.

Structs

AuditInfo	This struct represents a active audit session.
AuditInfoAddr	This struct represents a active audit session address.
AuditMask	This struct defines the bit mask for auditing successful and failed events out of the predefined list of event classes.
AuditTerminalId	This struct defines the Terminal ID recorded with every event caused by the process.
AuditTerminalIdAddr	This struct includes a larger address storage field and an additional field with the type of address stored.

audit_info	Returns the `AuditInfo`.
getaudit ^⚠	This system call retrieves the active audit session state for the current process via the `AuditInfo` pointed to by `auditinfo`.
getaudit_addr ^⚠	This system call uses the expanded `AuditInfoAddr` data structure and supports Terminal IDs with larger addresses such as those used in IP version 6.

AuditClass
AuditEmod
AuditEvent
AuditSessionId	This type contains the audit session ID which is recorded with every event caused by the process.
AuditUserId	This type contains the audit identifier which is recorded in the audit log for each event the process caused.