setauevent3
Look up information from the audit_event database
Part of au_event(3).
Usage
#include <bsm/libbsm.h>
void
setauevent(void);
void
endauevent(void);
struct au_event_ent *
getauevent(void);
struct au_event_ent *
getauevent_r(struct au_event_ent *e);
struct au_event_ent *
getauevnam(const char *name);
struct au_event_ent *
getauevnam_r(struct au_event_ent *e, const char *name);
struct au_event_ent *
getauevnum(au_event_t event_number);
struct au_event_ent *
getauevnum_r(struct au_event_ent *e, au_event_t event_number);
au_event_t *
getauevnonam(const char *event_name);
au_event_t *
getauevnonam_r(au_event_t *ev, const char *event_name);
Library
library “libbsm”
Overview
These interfaces may be used to look up information from the audit_event(5) database, which describes audit events. Entries in the database are described by struct au_event_ent entries, which are returned by calls to getauevent(), getauevnam(), or getauevnum(). It is also possible to look up an event number via a call to getauevnonam().
The setauevent() function resets the database access session for audit_event(5), so that the next call to getauevent() will start with the first entry in the database.
The endauevent() function closes the audit_event(5) database session.
The getauevent() function returns a reference to the next entry in the audit_event(5) database.
The getauevnam() function returns a reference to the entry in the audit_event(5) database with a name of name.
getauevnum() returns a reference to the entry in the audit_event(5) database with an event number of event_number.
The getauevnonam() function returns a reference to an audit event number using the audit_event(5) database.
Return values
Functions getauevent(), getauevent_r(), getauevnam(), getauevnam_r(), getauevnum(), getauevnum_r(), and getauevnonam() will return a reference to a struct au_event_ent or au_event_t on success, or NULL on failure, with errno set to provide further error information.
Releases
47 releases since FreeBSD 6.2-RELEASE; the text changed 2 times.