xref: /illumos-gate/usr/src/lib/auditd_plugins/syslog/sysplugin.h (revision 581cede61ac9c14d8d4ea452562a567189eead78)
1 /*
2  * CDDL HEADER START
3  *
4  * The contents of this file are subject to the terms of the
5  * Common Development and Distribution License, Version 1.0 only
6  * (the "License").  You may not use this file except in compliance
7  * with the License.
8  *
9  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
10  * or http://www.opensolaris.org/os/licensing.
11  * See the License for the specific language governing permissions
12  * and limitations under the License.
13  *
14  * When distributing Covered Code, include this CDDL HEADER in each
15  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
16  * If applicable, add the following below this CDDL HEADER, with the
17  * fields enclosed by brackets "[]" replaced with your own identifying
18  * information: Portions Copyright [yyyy] [name of copyright owner]
19  *
20  * CDDL HEADER END
21  */
22 /*
23  * Copyright 2003 Sun Microsystems, Inc.  All rights reserved.
24  * Use is subject to license terms.
25  */
26 
27 #ifndef	_SYSPLUGIN_H
28 #define	_SYSPLUGIN_H
29 
30 #pragma ident	"%Z%%M%	%I%	%E% SMI"
31 
32 #ifdef __cplusplus
33 extern "C" {
34 #endif
35 
36 #include <sys/types.h>
37 #include <bsm/audit.h>
38 
39 struct selected_fields {
40 	/* from header token */
41 	au_event_t	sf_eventid;	/* 0 if no value */
42 	uint32_t	sf_reclen;	/* 0 if no value */
43 
44 	/* from exit or return token */
45 	int		sf_pass;	/* 0 no value, -1 fail, 1 pass */
46 
47 	/* from subject token */
48 	uint32_t	sf_asid;	/* 0 no value */
49 	uid_t		sf_auid;	/* -2 no value, > -1 otherwise */
50 	uid_t		sf_euid;	/* -2 no value, > -1 otherwise */
51 	gid_t		sf_egid;	/* -2 no value, > -1 otherwise */
52 	au_tid_addr_t	sf_tid;		/* tid.at_type = 0 no value */
53 
54 	/* from process token */
55 	uid_t		sf_pauid;	/* -2 no value */
56 	uid_t		sf_peuid;	/* -2 no value */
57 
58 	/* data that may be truncated goes after this point */
59 
60 	/* from uauth token */
61 	size_t		sf_uauthlen;
62 	char		*sf_uauth;	/* NULL no value */
63 
64 	/* from text token */
65 	size_t		sf_textlen;
66 	char		*sf_text;	/* NULL no value */
67 
68 	/* from path and atpath token */
69 	size_t		sf_pathlen;
70 	char		*sf_path;		/* NULL no value */
71 	size_t		sf_atpathlen;
72 	char		*sf_atpath;	/* NULL no value */
73 
74 	/* from sequence token */
75 	int32_t		sf_sequence;	/* -1 no value */
76 
77 	/* from zonename token */
78 	size_t		sf_zonelen;
79 	char		*sf_zonename;	/* NULL no value */
80 };
81 typedef struct selected_fields tosyslog_t;
82 
83 
84 #ifdef __cplusplus
85 }
86 #endif
87 
88 #endif	/* _SYSPLUGIN_H */
89