home *** CD-ROM | disk | FTP | other *** search
-
-
-
- ssssaaaattttwwwwrrrriiiitttteeee((((2222)))) ssssaaaattttwwwwrrrriiiitttteeee((((2222))))
-
-
-
- NNNNAAAAMMMMEEEE
- satwrite, satvwrite - write a block of audit record data
-
- CCCC SSSSYYYYNNNNOOOOPPPPSSSSIIIISSSS
- ####iiiinnnncccclllluuuuddddeeee <<<<ssssyyyyssss////ssssaaaatttt....hhhh>>>>
- iiiinnnntttt ssssaaaattttwwwwrrrriiiitttteeee ((((iiiinnnntttt eeeevvvveeeennnntttt,,,, iiiinnnntttt oooouuuuttttccccoooommmmeeee,,,, cccchhhhaaaarrrr ****bbbbuuuuffffffffeeeerrrr,,,, uuuunnnnssssiiiiggggnnnneeeedddd nnnnbbbbyyyytttteeeessss))))
- ####iiiinnnncccclllluuuuddddeeee <<<<ssssttttddddaaaarrrrgggg....hhhh>>>> ####iiiinnnncccclllluuuuddddeeee <<<<ssssaaaatttt....hhhh>>>>
- iiiinnnntttt ssssaaaattttvvvvwwwwrrrriiiitttteeee ((((iiiinnnntttt eeeevvvveeeennnntttt,,,, iiiinnnntttt oooouuuuttttccccoooommmmeeee,,,, cccchhhhaaaarrrr ****ffffoooorrrrmmmmaaaatttt,,,, ............))))
-
- DDDDEEEESSSSCCCCRRRRIIIIPPPPTTTTIIIIOOOONNNN
- _s_a_t_w_r_i_t_e writes _n_b_y_t_e_s bytes to the security audit trail record queue
- from the buffer pointed to by _b_u_f_f_e_r.
-
- _s_a_t_v_w_r_i_t_e is a more convenient libc interface for generating audit
- records, which are generally text strings. _F_o_r_m_a_t is a printf-like
- format string, followed by a variable number of arguments. See
- _p_r_i_n_t_f(3S) for more information on the possible formatting characters.
-
- _E_v_e_n_t must be equal to one of the SAT record type constants for
- administrative events, as defined in /_u_s_r/_i_n_c_l_u_d_e/_s_y_s/_s_a_t._h. Permissible
- values are:
-
- SSSSAAAATTTT____AAAAEEEE____AAAAUUUUDDDDIIIITTTT _s_a_t_w_r_i_t_e is called by audit subsystem utilities.
-
- SSSSAAAATTTT____AAAAEEEE____IIIIDDDDEEEENNNNTTTTIIIITTTTYYYY _s_a_t_w_r_i_t_e is called by programs in the identification
- and authentication subsystem.
-
- SSSSAAAATTTT____AAAAEEEE____DDDDBBBBEEEEDDDDIIIITTTT _s_a_t_w_r_i_t_e is called by the program which edits
- administrative databases.
-
- SSSSAAAATTTT____AAAAEEEE____MMMMOOOOUUUUNNNNTTTT _s_a_t_w_r_i_t_e is called by the programs which mount
- filesystems.
-
- SSSSAAAATTTT____AAAAEEEE____CCCCUUUUSSSSTTTTOOOOMMMM _s_a_t_w_r_i_t_e is called by customer written self auditing
- applications.
-
- _o_u_t_c_o_m_e should be equal to SSSSAAAATTTT____SSSSUUUUCCCCCCCCEEEESSSSSSSS or SSSSAAAATTTT____FFFFAAAAIIIILLLLUUUURRRREEEE, as defined in
- /_u_s_r/_i_n_c_l_u_d_e/_s_y_s/_s_a_t._h. _s_a_t_w_r_i_t_e interprets any value other than
- SSSSAAAATTTT____FFFFAAAAIIIILLLLUUUURRRREEEE as an alternate representation of SSSSAAAATTTT____SSSSUUUUCCCCCCCCEEEESSSSSSSS.
-
- _B_u_f_f_e_r should contain audit data in human readable form. Although there
- are no restrictions on its content, _s_a_t__i_n_t_e_r_p_r_e_t(1m) always interprets
- the data as a null-terminated string.
-
- EEEERRRRRRRROOOORRRRSSSS
- _s_a_t_w_r_i_t_e fails if these conditions are true:
-
- [ENOPKG] Audit is not configured on this system.
-
-
-
-
- PPPPaaaaggggeeee 1111
-
-
-
-
-
-
- ssssaaaattttwwwwrrrriiiitttteeee((((2222)))) ssssaaaattttwwwwrrrriiiitttteeee((((2222))))
-
-
-
- [EPERM] The caller does not have CCCCAAAAPPPP____AAAAUUUUDDDDIIIITTTT____WWWWRRRRIIIITTTTEEEE capability.
-
- [EINVAL] _b_u_f_f_e_r is null, or _n_b_y_t_e_s is greater than
- SSSSAAAATTTT____MMMMAAAAXXXX____UUUUSSSSEEEERRRR____RRRREEEECCCC.
-
- [EDOM] _e_v_e_n_t is not one of the permitted values.
-
- [EFAULT] data can't be copied from _b_u_f_f_e_r into the kernel.
-
- RRRREEEETTTTUUUURRRRNNNN VVVVAAAALLLLUUUUEEEE
- A return value of ----1111 indicates an error and _e_r_r_n_o is set to indicate the
- error. Otherwise 0000 is returned.
-
- SSSSEEEEEEEE AAAALLLLSSSSOOOO
- sat_echo(1m), satoff(2), saton(2), satread(2), satstate(2), printf(3S)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- PPPPaaaaggggeeee 2222
-
-
-
-