Linux Manuals session 3

NAME audit_log_user_semanage_message – log a semanage message SYNOPSIS #include <libaudit.h> int audit_log_user_semanage_message(int audit_fd, int type, const char *pgname, const char *op, const char *name, unsigned int id, const char *new_seuser, const char *new_role, const char *new_range, const char *old_seuser, const char *old_role, const char *old_range, const char *host, const char *addr, const char *tty, int…

NAME audit_log_user_message – log a general user message SYNOPSIS #include <libaudit.h> int audit_log_user_message(int audit_fd, int type, const char *message, const char *hostname, const char *addr, const char *tty, int result) DESCRIPTION This function will log a message to the audit system using a predefined message format. This function should be used by all ELF console…

NAME audit_log_user_command – log a user command SYNOPSIS #include <libaudit.h> int audit_log_user_command(int audit_fd, int type, const char *command, const char *tty, int result); DESCRIPTION This function will log a command to the audit system using a predefined message format. It encodes the command as the audit system expects for untrusted strings. This function should be…

NAME audit_log_user_comm_message – log a user message from a console app SYNOPSIS #include <libaudit.h> int audit_log_user_comm_message(int audit_fd, int type, const char *message, const char *comm, const char *hostname, const char *addr, const char *tty, int result) DESCRIPTION This function will log a message to the audit system using a predefined message format. This function should…

NAME audit_log_user_avc_message – log a user avc message SYNOPSIS #include <libaudit.h> int audit_log_user_avc_message(int audit_fd, int type, const char *message, const char *hostname, const char *addr, const char *tty, uid_t uid) DESCRIPTION This function will log a message to the audit system using a predefined message format. This function should be used by all apps that…

NAME audit_log_semanage_message – log a semanage message SYNOPSIS #include <libaudit.h> int audit_log_semanage_message(int audit_fd, int type, const char *pgname, const char *op, const char *name, unsigned int id, const char *new_seuser, const char *new_role, const char *new_range, const char *old_seuser, const char *old_role, const char *old_range, const char *host, const char *addr, const char *tty, int…

NAME audit_log_acct_message – log a user account message SYNOPSIS #include <libaudit.h> int audit_log_acct_message(int audit_fd, int type, const char *pgname, const char *op, const char *name, unsigned int id, const char *host, const char *addr, const char *tty, int result) DESCRIPTION This function will log a message to the audit system using a predefined message format….

NAME audit_getloginuid – Get a program’s loginuid value SYNOPSIS #include <libaudit.h> uid_t audit_getloginuid(void); DESCRIPTION This function returns the task attribute loginuid. RETURN VALUE This function returns the loginuid value if it was set. It will return a -1 if loginuid was unset. However, since uid_t is an unsigned type, you will see the converted value…

NAME audit_getloginuid – Get a program’s login session id value SYNOPSIS #include <libaudit.h> uin32_t audit_get_session(void); DESCRIPTION This function returns the task’s session id attribute. RETURN VALUE This function returns the session id value if it was set. It will return a -1 if the session id is unset. However, since uint32_t is an unsigned type,…

NAME audit_get_reply – Get the audit system’s reply SYNOPSIS #include <libaudit.h> int audit_get_reply(int fd, struct audit_reply *rep, reply_t block, int peek); DESCRIPTION This function gets the next data packet sent on the audit netlink socket. This function is usually called after sending a command to the audit system. fd should be an open file descriptor…

NAME audit_encode_nv_string – encode a name/value pair in a string SYNOPSIS #include <libaudit.h> char *audit_encode_nv_string(const char *name, const char *value, unsigned int vlen) DESCRIPTION This function is used to encode a name/value pair. This should be used on any field being logged that potentially contains a space, a double-quote, or a control character. Any value…

NAME audit_detect_machine – Detects the current machine type SYNOPSIS #include <libaudit.h> int audit_detect_machine (void); DESCRIPTION audit_detect_machine queries uname and converts the kernel machine string to an enum value defined in machine_t. The machine type is needed for any use of the audit_name_to_syscall function. RETURN VALUE Returns -1 if an error occurs; otherwise, the return value…

NAME audit_delete_rule_data – Delete audit rule SYNOPSIS #include <libaudit.h> int audit_delete_rule_data (int fd, struct audit_rule_data *rule, int flags, int action); DESCRIPTION audit_delete_rule_data is used to delete rules that are currently loaded in the kernel. To delete a rule, you must set up the rules identical to the one being deleted. See audit_add_rule_data for flag and…

NAME audit_add_watch – create a rule layout for a watch SYNOPSIS #include <libaudit.h> int audit_add_watch(struct audit_rule_data **rulep, const char *path); DESCRIPTION audit_add_watch will create a watch rule in the pointer to a pointer rulep. All that you need to pass it is the full path to a file and it will initialize the audit_rule_data structure…

NAME audit_add_rule_data – Add new audit rule SYNOPSIS #include <libaudit.h> int audit_add_rule_data (int fd, struct audit_rule_data *rule, int flags, int action); DESCRIPTION audit_add_rule adds an audit rule previously constructed with audit_rule_fieldpair_data(3) to one of several kernel event filters. The filter is specified by the flags argument. Possible values for flags are: • AUDIT_FILTER_USER – Apply…

NAME attr_set, attr_setf – set the value of a user attribute of a filesystem object C SYNOPSIS #include <attr/attributes.h> int attr_set(const char *path, const char *attrname, const char *attrvalue, const int valuelength, int flags); int attr_setf(int fd, const char *attrname, const char *attrvalue, const int valuelength, int flags); [ DESCRIPTION ] The attr_set and attr_setf…

NAME attr_remove, attr_removef – remove a user attribute of a filesystem object C SYNOPSIS #include <attr/attributes.h> int attr_remove(const char *path, const char *attrname, int flags); int attr_removef(int fd, const char *attrname, int flags); [ DESCRIPTION ] The attr_remove and attr_removef functions provide a way to remove previously created attributes from filesystem objects. Path points to…

NAME attr_multi, attr_multif – manipulate multiple user attributes on a filesystem object at once C SYNOPSIS #include <attr/attributes.h> int attr_multi(const char *path, attr_multiop_t *oplist, int count, int flags); int attr_multif(int fd, attr_multiop_t *oplist, int count, int flags); [ DESCRIPTION ] The attr_multi and attr_multif functions provide a way to operate on multiple attributes of a…

NAME attr_list, attr_listf – list the names of the user attributes of a filesystem object C SYNOPSIS #include <sys/attributes.h> int attr_list(const char *path, char *buffer, const int buffersize, int flags, attrlist_cursor_t *cursor); int attr_listf(int fd, char *buffer, const int buffersize, int flags, attrlist_cursor_t *cursor); [ DESCRIPTION ] The attr_list and attr_listf functions provide a way…

NAME attr_get, attr_getf – get the value of a user attribute of a filesystem object C SYNOPSIS #include <attr/attributes.h> int attr_get(const char *path, const char *attrname, char *attrvalue, int *valuelength, int flags); int attr_getf(int fd, const char *attrname, char *attrvalue, int *valuelength, int flags); [ DESCRIPTION ] The attr_get and attr_getf functions provide a way…