#include <xdasapi.h>
#include <stddef.h>
Go to the source code of this file.
Data Structures | |
struct | xdas_buffer_desc_struct |
XDAS UTF-8 content buffer descriptor. More... | |
struct | xdas_audit_record_desc_struct |
XDAS in-memory audit record structure. More... | |
Defines | |
#define | XDAS_RECORD_VERSION "0" |
XDAS record format version number - currently at 0. | |
XDAS Standard Error Codes | |
One or more status codes are returned by each XDAS-API routine. Two distinct sorts of status code are returned. These are termed XDAS status codes and minor status codes. An implementation of XDAS functions shall return XDAS_S_COMPLETE and other status values appropriate for the implementation of the function. The characteristics of a particular implementation may make some status returns inappropriate for that implementation. XDAS-API routines return XDAS status codes as their integer function value. These codes indicate major status errors that are independent of the underlying mechanism used to provide the security service. A XDAS status code can indicate a single fatal generic API error from the routine error and a single calling error. These errors are encoded into the 32-bit XDAS status code. Changes to the original OpenGroup XDAS specification: 1) Moved XDAS_S_NOT_SUPPORTED from position 24 to position 27 because position 24 was in use twice (also by XDAS_S_RECORD_SYNTAX_ERROR)
2) Added XDAS_S_INVALID_FILTER_ACTION because it wasn't there, and all other types of filter information were represented (and used). | |
#define | XDAS_S_COMPLETE 0 |
#define | XDAS_S_AUTHORIZATION_FAILURE 1 |
#define | XDAS_S_BUFF_TOO_SMALL 2 |
#define | XDAS_S_END 3 |
#define | XDAS_S_FAILURE 4 |
#define | XDAS_S_INCOMPLETE_RECORD 5 |
#define | XDAS_S_INVALID_ACTION_LIST 6 |
#define | XDAS_S_INVALID_AUDIT_STREAM 7 |
#define | XDAS_S_INVALID_DAS_REF 8 |
#define | XDAS_S_INVALID_EVENT_INFO 9 |
#define | XDAS_S_INVALID_EVENT_NO 10 |
#define | XDAS_S_INVALID_FILTER 11 |
#define | XDAS_S_INVALID_FILTER_EXPR 12 |
#define | XDAS_S_INVALID_FILTER_LIST 13 |
#define | XDAS_S_INVALID_FILTER_TYPE 14 |
#define | XDAS_S_INVALID_INITIATOR_INFO 15 |
#define | XDAS_S_INVALID_ORIG_INFO 16 |
#define | XDAS_S_INVALID_OUTCOME 17 |
#define | XDAS_S_INVALID_RECORD_DESCRIPTOR 18 |
#define | XDAS_S_INVALID_RECORD_NUMBER 19 |
#define | XDAS_S_INVALID_SECURITY_CONTEXT 20 |
#define | XDAS_S_INVALID_TARGET_INFO 21 |
#define | XDAS_S_NO_AUDIT 22 |
#define | XDAS_S_NO_DECISION_YET 23 |
#define | XDAS_S_RECORD_SYNTAX_ERROR 24 |
#define | XDAS_S_STORAGE_FAILURE 25 |
#define | XDAS_S_SERVICE_FAILURE 26 |
#define | XDAS_S_NOT_SUPPORTED 27 |
#define | XDAS_S_INVALID_FILTER_ACTION 28 |
OpenXDAS Minor Status Codes. | |
These minor status codes are returned in the minor_status parameter of XDAS API functions as implemented by OpenXDAS.
These values are only returned in | |
#define | OXDAS_MS_NO_ERROR 0 |
#define | OXDAS_MS_UNKNOWN_ERROR 1 |
#define | OXDAS_MS_OUT_OF_MEMORY 2 |
#define | OXDAS_MS_NET_INIT_FAILED 3 |
#define | OXDAS_MS_NET_GENERAL_ERROR 4 |
#define | OXDAS_MS_NET_BAD_SOCKET 5 |
#define | OXDAS_MS_NET_CONN_ABORTED 6 |
#define | OXDAS_MS_NET_CONN_RESET 7 |
#define | OXDAS_MS_NET_NOT_CONNECTED 8 |
#define | OXDAS_MS_NET_SHUTDOWN 9 |
#define | OXDAS_MS_NET_TIMEDOUT 10 |
#define | OXDAS_MS_NET_CONN_REFUSED 11 |
#define | OXDAS_MS_PROTOCOL 12 |
XDAS Calling Error Codes | |
If a XDAS-API routine returns a XDAS status code containing a non-zero value, the call failed.
If the Calling Error field is non-zero, the invoking application’s call of the routine was erroneous. Calling errors are defined in Table 6-1 of the XDAS Preliminary Specification document. | |
#define | XDAS_S_CALL_INACCESSIBLE_READ (1 << 16) |
#define | XDAS_S_CALL_INACCESSIBLE_WRITE (2 << 16) |
#define | XDAS_S_CALL_BAD_STRUCTURE (3 << 16) |
XDAS Error Macros | |
These macros may be used to extract routine or calling error codes from routine return values.
XDAS_ERROR simply returns true if the return value is an error. | |
#define | XDAS_ROUTINE_ERROR(e) ((e) & 0x0000FFFF) |
#define | XDAS_CALLING_ERROR(e) ((e) & 0xFFFF0000) |
#define | XDAS_ERROR(e) ((e) ? 1 : 0) |
XDAS Basic Event Types | |
The generic set of XDAS events numbers. XDAS conforming implementations are required to handle all these defined audit events as valid. An application or system developer that submits or imports security domain specific events to the XDAS service must map those events to these XDAS generic events or register their own set of audit events with the OpenGroup. The following table is a duplicate of Figure 6-2 of the Open Group XDAS Preliminary Specification, and describes the bit-format of event types:
Bit: 01234 8 16 24 31 -------------------------------------- Format A: |0| set-id | event-id | -------------------------------------- Format B: |10| set-id | event-id | -------------------------------------- Format C: |110| set-id | event-id | -------------------------------------- Format D: |1110| event-id | -------------------------------------- Format E: |11111| reserved | -------------------------------------- Changes to the original OpenGroup XDAS specification:
1) The specified list of generic class A events had one duplicate at position 0x01000024, XDAS_AE_START_SYS was a duplicate of the previous event XDAS_AE_MODIFY_DATA_ITEM_CONTENTS. To maintain the event list order, each event from XDAS_AE_START_SYS to XDAS_AE_AUD_DS_CORR has been shifted up one numeric value. | |
#define | XDAS_AE_CREATE_ACCOUNT 0x01000001 |
#define | XDAS_AE_DELETE_ACCOUNT 0x01000002 |
#define | XDAS_AE_DISABLE_ACCOUNT 0x01000003 |
#define | XDAS_AE_ENABLE_ACCOUNT 0x01000004 |
#define | XDAS_AE_QUERY_ACCOUNT 0x01000005 |
#define | XDAS_AE_MODIFY_ACCOUNT 0x01000006 |
#define | XDAS_AE_CREATE_SESSION 0x01000007 |
#define | XDAS_AE_TERMINATE_SESSION 0x01000008 |
#define | XDAS_AE_QUERY_SESSION 0x01000009 |
#define | XDAS_AE_MODIFY_SESSION 0x0100000A |
#define | XDAS_AE_CREATE_DATA_ITEM 0x0100000B |
#define | XDAS_AE_DELETE_DATA_ITEM 0x0100000C |
#define | XDAS_AE_QUERY_DATA_ITEM_ATT 0x0100000D |
#define | XDAS_AE_MODIFY_DATA_ITEM_ATT 0x0100000E |
#define | XDAS_AE_INSTALL_SERVICE 0x0100000F |
#define | XDAS_AE_REMOVE_SERVICE 0x01000010 |
#define | XDAS_AE_QUERY_SERVICE_CONFIG 0x01000011 |
#define | XDAS_AE_MODIFY_SERVICE_CONFIG 0x01000012 |
#define | XDAS_AE_DISABLE_SERVICE 0x01000013 |
#define | XDAS_AE_ENABLE_SERVICE 0x01000014 |
#define | XDAS_AE_INVOKE_SERVICE 0x01000015 |
#define | XDAS_AE_TERMINATE_SERVICE 0x01000016 |
#define | XDAS_AE_QUERY_PROCESS_CONTEXT 0x01000017 |
#define | XDAS_AE_MODIFY_PROCESS_CONTEXT 0x01000018 |
#define | XDAS_AE_CREATE_PEER_ASSOC 0x01000019 |
#define | XDAS_AE_TERMINATE_PEER_ASSOC 0x0100001A |
#define | XDAS_AE_QUERY_ASSOC_CONTEXT 0x0100001B |
#define | XDAS_AE_MODIFY_ASSOC_CONTEXT 0x0100001C |
#define | XDAS_AE_RECEIVE_DATA_VIA_ASSOC 0x0100001D |
#define | XDAS_AE_SEND_DATA_VIA_ASSOC 0x0100001E |
#define | XDAS_AE_CREATE_DATA_ITEM_ASSOC 0x0100001F |
#define | XDAS_AE_TERMINATE_DATA_ITEM_ASSOC 0x01000020 |
#define | XDAS_AE_QUERY_DATA_ITEM_ASSOC_CONTEXT 0x01000021 |
#define | XDAS_AE_MODIFY_DATA_ITEM_ASSOC_CONTEXT 0x01000022 |
#define | XDAS_AE_QUERY_DATA_ITEM_CONTENTS 0x01000023 |
#define | XDAS_AE_MODIFY_DATA_ITEM_CONTENTS 0x01000024 |
#define | XDAS_AE_START_SYS 0x01000025 |
#define | XDAS_AE_SHUTDOWN_SYS 0x01000026 |
#define | XDAS_AE_RESOURCE_EXHAUST 0x01000027 |
#define | XDAS_AE_RESOURCE_CORRUPT 0x01000028 |
#define | XDAS_AE_BACKUP_DATASTORE 0x01000029 |
#define | XDAS_AE_RECOVER_DATASTORE 0x0100002A |
#define | XDAS_AE_AUD_CONFIG 0x0100002B |
#define | XDAS_AE_AUD_DS_FULL 0x0100002C |
#define | XDAS_AE_AUD_DS_CORR 0x0100002D |
#define | XDAS_AE_MODIFY_AUTH_TOKEN 0x02000001 |
#define | XDAS_AE_APPROVAL_RECEIVED 0x02000002 |
#define | XDAS_AE_APPROVAL_REQUESTED 0x02000003 |
#define | XDAS_AE_REQUEST_ESCALATED 0x02000004 |
#define | XDAS_AE_NOTIFICATION_SENT 0x02000005 |
#define | XDAS_AE_CREATE_ROLE 0x02000006 |
#define | XDAS_AE_DELETE_ROLE 0x02000007 |
#define | XDAS_AE_DISABLE_ROLE 0x02000008 |
#define | XDAS_AE_ENABLE_ROLE 0x02000009 |
#define | XDAS_AE_QUERY_ROLE 0x0200000A |
#define | XDAS_AE_MODIFY_ROLE 0x0200000B |
XDAS Basic Event Classes | |
Similar to event numbers, event-class numbers encode the identification of an event-class set, as well as the identification of a unique event class within that set. A set of event-class numbers is assigned (upon request) by the OpenGroup to an organization or a vendor. The organization or vendor then has the authority to use the the event-class numbers within that set. Conceptually, each event class number is a pair (set-id, class-id), where set-id identifies an event-class set, and the class-id identifies an event class within in the set. In practice, each event-class number must have one of the formats illustrated in Figure 6-3 of the Open Group XDAS Preliminary Specification. This table is reproduced here:
Bit: 01234 8 16 24 31 -------------------------------------- Format A: |0| set-id | class-id | -------------------------------------- Format B: |10| set-id | class-id | -------------------------------------- Format C: |110| class-id | -------------------------------------- Format D: |111| reserved | -------------------------------------- | |
#define | XDAS_AEC_ACCOUNT_MANAGEMENT 0x01000001 |
#define | XDAS_AEC_USER_SESSION 0x01000002 |
#define | XDAS_AEC_DATA_ITEM_MANAGEMENT 0x01000003 |
#define | XDAS_AEC_SERVICE_MANAGEMENT 0x01000004 |
#define | XDAS_AEC_SERVICE_UTILIZE 0x01000005 |
#define | XDAS_AEC_PEER_ASSOC_MANAGEMENT 0x01000006 |
#define | XDAS_AEC_DATA_ITEM_CONTENT_ACCESS 0x01000007 |
#define | XDAS_AEC_EXCEPTIONAL 0x01000008 |
#define | XDAS_AEC_AUDIT_SERVICE 0x01000009 |
XDAS Outcome Codes | |
XDAS outcome codes represent the outcome of a given event. The outcome codes are structured into sets for SUCCESS, FAILURE, and DENIAL. Multiple codes from within one of these sets may be returned by a single call by combining them using a bitwise OR, but it is not permitted for outcome codes from the different sets to be returned by a single call. For example, multiple SUCCESS codes may be returned by one call, but SUCCESS and FAILURE codes may not be returned by a single call. Changes to the original OpenGroup XDAS specification: 1) There are two outcome tables in the XDAS preliminary specification. One is in section 4.4, Identification of Audit Events. The other is in section 6.11, XDAS Event Outcome Codes. These two tables are in disagreement with one another in several ways so the OpenXDAS implementation tries to compensate with executive decisions where necessary. The first issue is a missing event in section 6.11 which is specified in the table in section 4.4.4 - XDAS_OUT_ALREADY_ENABLED. Since XDAS_OUT_ALREADY_DISABLED exists in both tables, OpenXDAS assumes that the missing entry in section 6.11 is an oversight. Unfortunately, there is no slot in the bitmap for this addition. The value of XDAS_OUT_LOST_ASSOCIATION was reduced by one in order to make room in the bitmap for XDAS_OUT_ALREADY_ENABLED.
2) The remaining discrepencies are limited to simple naming differences in the definition names. Arbitrary decisions were made to choose the names for OpenXDAS. These include XDAS_OUT_NON_EXISTENT, XDAS_OUT_INSUFFICIENT_PRIVILEGE and XDAS_OUT_INVALID_CREDENTIALS. | |
#define | XDAS_OUT_NOT_SPECIFIED 0xFFFFFFFF |
#define | XDAS_OUT_SUCCESS 0x00000000 |
#define | XDAS_OUT_PRIV_USED 0x00000100 |
#define | XDAS_OUT_PRIV_GRANTED 0x00000200 |
#define | XDAS_OUT_PRIV_REVOKED 0x00000400 |
#define | XDAS_OUT_PRESELECT_CRITERIA_SET 0x00000800 |
#define | XDAS_OUT_THRESHOLDS_SET 0x00001000 |
#define | XDAS_OUT_ACTIONS_SET 0x00002000 |
#define | XDAS_OUT_FAILURE 0x00000001 |
#define | XDAS_OUT_SERVICE_UNAVAILABLE 0x00000101 |
#define | XDAS_OUT_SERVICE_FAILURE 0x00000201 |
#define | XDAS_OUT_HARDWARE_FAILURE 0x00000401 |
#define | XDAS_OUT_LOST_ASSOCIATION 0x00000801 |
#define | XDAS_OUT_ALREADY_ENABLED 0x00001001 |
#define | XDAS_OUT_ALREADY_DISABLED 0x00002001 |
#define | XDAS_OUT_SERVICE_ERROR 0x00004001 |
#define | XDAS_OUT_BUSY 0x00008001 |
#define | XDAS_OUT_DISABLED 0x00010001 |
#define | XDAS_OUT_INVALID_INPUT 0x00020001 |
#define | XDAS_OUT_ENTITY_EXISTS 0x00040001 |
#define | XDAS_OUT_ENTITY_NON_EXISTENT 0x00080001 |
#define | XDAS_OUT_DENIAL 0x00000002 |
#define | XDAS_OUT_INSUFFICIENT_PRIVILEGE 0x00000102 |
#define | XDAS_OUT_INVALID_IDENTITY 0x00000202 |
#define | XDAS_OUT_INVALID_CREDENTIALS 0x00000402 |
XDAS Filter Types | |
Filters are used to set the criteria for preselecting events to be recorded, or for selecting records to be imported from an audit stream. A filter expression is defined as a UTF-8 character string. It is a sequence of variable length fields, separated by colon (":") delimiters, as set out below. Note that if a colon is part of an alphanumeric string, then it shall be escaped. The format for a single filter expression is defined as: include/exclude flag:attribute:operator:value A filter may be defined as a list of filter expressions which shall be evaluated in the sequence in which they are listed. The intention is that a subsequent expression may define exceptions to previous expression.
For example, an expression may exclude a set of events based on event class, but a subsequent expression, based on event number, may specifically include a subset of the events otherwise excluded by reference to event class. | |
#define | XDAS_C_SUBMIT 1 |
#define | XDAS_C_IMPORT 2 |
XDAS Filter Expression Flags | |
#define | XDAS_C_INCLUDE 1 |
#define | XDAS_C_EXCLUDE 2 |
XDAS Filter Attributes | |
#define | XDAS_VERSION 1 |
#define | XDAS_TIME_OFFSET 2 |
#define | XDAS_TIME_UNCERT_INTER 3 |
#define | XDAS_TIME_UNCERT_INDIC 4 |
#define | XDAS_TIME_SOURCE 5 |
#define | XDAS_TIME_TIME_ZONE 6 |
#define | XDAS_EVENT_NUMBER 7 |
#define | XDAS_OUTCOME 8 |
#define | XDAS_ORG_LOC_NAME 9 |
#define | XDAS_ORG_LOC_ADD 10 |
#define | XDAS_ORG_SERV_TYPE 11 |
#define | XDAS_ORG_AUTH_AUTH 12 |
#define | XDAS_ORG_PRINC_NAME 13 |
#define | XDAS_ORG_PRINC_IDENTITY 14 |
#define | XDAS_INT_AUTH_AUTH 15 |
#define | XDAS_INT_PRINC_NAME 16 |
#define | XDAS_INT_PRINC_IDENTITY 17 |
#define | XDAS_TGT_LOC_NAME 18 |
#define | XDAS_TGT_LOC_ADD 19 |
#define | XDAS_TGT_SERV_TYPE 20 |
#define | XDAS_TGT_AUTH_AUTH 21 |
#define | XDAS_TGT_PRINC_NAME 22 |
#define | XDAS_TGT_PRINC_IDENTITY 23 |
XDAS Filter Expression Operators | |
#define | XDAS_O_EQ 1 |
#define | XDAS_O_NE 2 |
#define | XDAS_O_GT 3 |
#define | XDAS_O_LT 4 |
#define | XDAS_O_GE 5 |
#define | XDAS_O_LE 6 |
#define | XDAS_O_BT 7 |
#define | XDAS_O_SS 8 |
XDAS Event Action Masks | |
A filter may also define the disposition of an event submitted to, or imported into the XDAS service. A filter action expression is defined as a UTF-8 character string. It is a sequence of variable length fields, separated by colon (":") delimiters, as set out below. Note that if a colon is part of an alphanumeric string, then it shall be escaped. The format for a single filter expression is defined as: action mask:text string The components of the action mask are defined here. The format of the text string is implementation defined. A filter may be defined as a list of filter actions which shall be executed in the sequence in which they are listed.
Action bits may be OR'd together to indicate that multiple actions are desired for a given class of events. | |
#define | XDAS_ACT_LOG 1 |
#define | XDAS_ACT_ALARM 2 |
#define | XDAS_ACT_ACTION 4 |
Typedefs | |
typedef struct xdas_buffer_desc_struct | xdas_buffer_desc |
XDAS UTF-8 content buffer descriptor. | |
typedef struct xdas_buffer_desc_struct * | xdas_buffer_t |
typedef struct xdas_audit_record_desc_struct | xdas_audit_record_desc |
XDAS in-memory audit record structure. | |
typedef struct xdas_audit_record_desc_struct * | xdas_audit_record_t |
typedef void * | xdas_audit_ref_t |
XDAS session handle. | |
typedef void * | xdas_audit_stream_t |
XDAS audit stream handle. | |
typedef void * | xdas_audit_rec_desc_t |
XDAS event record handle. | |
Functions | |
XDAS General Audit Service API | |
All callers must initiate a session with the XDAS before they can use any of the services it provides. The initialization of the session supports the mutual authentication of the audit client and audit service components and establishes the audit client’s XDAS authorities. The caller is returned a handle to the XDAS service which is then used for all XDAS API functions. On completion, the caller must terminate the XDAS session.
The XDAS General Audit Service API is part of the Basic XDAS specification conformance class. | |
XDASXPC int XDASAPI | xdas_initialize_session (int *minor_status, const char *org_info, xdas_audit_ref_t *das_ref) |
Initialize an XDAS session for use within the process. | |
XDASXPC int XDASAPI | xdas_terminate_session (int *minor_status, xdas_audit_ref_t *das_ref) |
Terminate an XDAS session. | |
XDAS Audit Read API | |
The Audit Read API is used to extract records from the XDAS audit stream for analysis. The interface supports the copying of a record into a buffer where the contents may be examined by the caller. The interfaces are available to privileged callers who possess the XDAS_AUDIT_READ authority.
The XDAS Audit Read API is part of the Basic XDAS specification conformance class. | |
XDASXPC int XDASAPI | xdas_close_audit_stream (int *minor_status, xdas_audit_ref_t das_ref, xdas_audit_stream_t *audit_stream_ref) |
Closes an XDAS audit stream. | |
XDASXPC int XDASAPI | xdas_get_next (int *minor_status, xdas_audit_ref_t das_ref, xdas_audit_stream_t audit_stream_ref, unsigned max_records, xdas_buffer_t audit_record_buffer, unsigned *no_of_records) |
Fill an output buffer with the next set of records in an audit stream. | |
XDASXPC int XDASAPI | xdas_open_audit_stream (int *minor_status, xdas_audit_ref_t das_ref, xdas_audit_stream_t *audit_stream_ref) |
Opens an XDAS audit stream and associates it with an XDAS session. | |
XDASXPC int XDASAPI | xdas_parse_record (int *minor_status, xdas_audit_ref_t das_ref, xdas_buffer_t audit_record_buffer, unsigned record_number, xdas_audit_record_t audit_record) |
Parse a specified XDAS record from an XDAS record buffer. | |
XDASXPC int XDASAPI | xdas_rewind_audit_stream (int *minor_status, xdas_audit_ref_t das_ref, xdas_audit_stream_t audit_stream_ref) |
Rewind an audit stream read pointer. | |
XDAS Audit Log Import API | |
This service permits domain specific audit services to import their own audit records into the XDAS service for consolidation and analysis at the distributed system level. Only callers with the XDAS_AUDIT_IMPORT authority are permitted to use this function.
The XDAS Audit Log Import API is part of the XDAS specification Import API Option conformance class. | |
XDASXPC int XDASAPI | xdas_import_event_records (int *minor_status, xdas_audit_ref_t das_ref, xdas_buffer_t audit_record_buffer, size_t *position_in_buffer) |
Import event records from an external service into the XDAS common format. | |
XDAS Audit Event Service Client API | |
Callers submit security relevant events to the Audit Event Service Client API. The functions builds the record from the information given by the caller and from the processing environment. The interfaces cover the creation, filling and committing of an audit record to the audit trail.
The XDAS Audit Event Service Client API is part of the XDAS specification Event Submission API Option conformance class. | |
XDASXPC int XDASAPI | xdas_commit_record (int *minor_status, xdas_audit_ref_t das_ref, xdas_audit_rec_desc_t *audit_record_descriptor) |
Write a completed audit record to the associated audit stream. | |
XDASXPC int XDASAPI | xdas_discard_record (int *minor_status, xdas_audit_ref_t das_ref, xdas_audit_rec_desc_t *audit_record_descriptor) |
Discard a previously created audit record. | |
XDASXPC int XDASAPI | xdas_put_event_info (int *minor_status, xdas_audit_ref_t das_ref, xdas_audit_rec_desc_t *audit_record_descriptor, unsigned event_number, unsigned outcome, const char *initiator_information, const char *target_information, const char *event_information) |
Add specific event information to an audit record. | |
XDASXPC int XDASAPI | xdas_start_record (int *minor_status, xdas_audit_ref_t das_ref, xdas_audit_rec_desc_t *audit_record_descriptor, unsigned event_number, unsigned outcome, const char *initiator_information, const char *target_information, const char *event_information) |
Creates a new event record object. | |
XDASXPC int XDASAPI | xdas_timestamp_record (int *minor_status, xdas_audit_ref_t das_ref, xdas_audit_rec_desc_t audit_record_descriptor) |
Add a timestamp to the specified audit record. | |
XDAS Audit Event Management API | |
The Audit Event Management API provides the means whereby the Audit Event Discrimination Service and the Audit Event Disposition Service are configured. Only callers with the XDAS_AUDIT_CONTROL authority are permitted to use these interfaces.
The XDAS Audit Event Management API is part of the XDAS specification Filter Management API Option conformance class. | |
XDASXPC int XDASAPI | xdas_create_filter (int *minor_status, xdas_audit_ref_t das_ref, const char *name, unsigned filter_type, const char *filter_exp, const char *filter_act) |
Create a named audit filter. | |
XDASXPC int XDASAPI | xdas_delete_filter (int *minor_status, xdas_audit_ref_t das_ref, const char *name) |
Delete an audit filter by name. | |
XDASXPC int XDASAPI | xdas_disable_filter (int *minor_status, xdas_audit_ref_t das_ref, const char *name) |
Disable an audit filter by name. | |
XDASXPC int XDASAPI | xdas_enable_filter (int *minor_status, xdas_audit_ref_t das_ref, const char *name) |
Enable an audit filter by name. | |
XDASXPC int XDASAPI | xdas_get_filter (int *minor_status, xdas_audit_ref_t das_ref, const char *name, unsigned *filter_type, xdas_buffer_t filter_exp, xdas_buffer_t filter_act, unsigned *filter_status) |
Get an audit filter by name. | |
XDASXPC int XDASAPI | xdas_list_filters (int *minor_status, xdas_audit_ref_t das_ref, char **filter_name_list, size_t *buffer_size) |
Return a list of all defined audit filter names. |
Definition in file xdas.h.