Print this page
NEX-13644 File access audit logging
Reviewed by: Gordon Ross <gordon.ross@nexenta.com>
Reviewed by: Roman Strashkin <roman.strashkin@nexenta.com>
Reviewed by: Saso Kiselkov <saso.kiselkov@nexenta.com>
Reviewed by: Rick McNeal <rick.mcneal@nexenta.com>
Reviewed by: Yuri Pankov <yuri.pankov@nexenta.com>

@@ -19,10 +19,12 @@
  * CDDL HEADER END
  */
 /*
  * Copyright 2010 Sun Microsystems, Inc.  All rights reserved.
  * Use is subject to license terms.
+ *
+ * Copyright 2018 Nexenta Systems, Inc.  All rights reserved.
  */
 
 #ifndef _AUDITRT_H
 #define _AUDITRT_H
 

@@ -153,10 +155,11 @@
 #define OBJ_SEMOWNER    0x04000  /* 'o' semaphore [c]owner */
 #define OBJ_SHMGROUP    0x08000  /* 'o' shared memory [c]group */
 #define OBJ_SHMOWNER    0x10000  /* 'o' shared memory [c]owner */
 #define OBJ_FMRI        0x20000  /* 'o' fmri object */
 #define OBJ_USER        0x40000  /* 'o' user object */
+#define OBJ_WSID        0x80000  /* 'o' windows sid object */
 
 #define SOCKFLG_MACHINE 0       /* search socket token by machine name */
 #define SOCKFLG_PORT    1       /* search socket token by port number */
 
 /*

@@ -186,10 +189,11 @@
 extern uid_t    obj_owner;      /* object owner */
 extern int      subj_id;        /* subject identifier */
 extern char     ipc_type;       /* 'o' object type - tell what type of IPC */
 extern scf_pattern_t fmri;      /* 'o' fmri value */
 extern uid_t    obj_user;       /* 'o' user value */
+extern char     *wsid;          /* 'o' wsid value */
 
 /*
  * File selection options
  */
 extern char     *f_machine;     /* 'M' machine (suffix) type */

@@ -210,10 +214,11 @@
  * Error_str is set whenever an error occurs to point to a string describing
  * the error. When the error message is printed error_str is also
  * printed to describe exactly what went wrong.
  * Errbuf is used to build messages with variables in them.
  */
+#define ERRBUF_SZ       256
 extern char     *error_str;     /* current error message */
 extern char     errbuf[];       /* buffer for building error message */
 extern char     *ar;            /* => "auditreduce:" */
 
 /*