SAT_EVENTTOSTR(3L) SAT_EVENTTOSTR(3L)
sat_eventtostr, sat_strtoevent - convert an audit event index to/from an
audit event string
#include <sys/sat.h>
char * sat_eventtostr (event)
int event;
int sat_strtoevent (evstr)
char *evstr;
sat_eventtostr returns a human-readable string which represents the audit
event passed to it in event. The value returned points to a static
character array.
event must be a positive integer less than SAT_NTYPES (defined in
<sys/sat.h>).
sat_strtoevent returns a machine-readable event index which represents
the string passed to it in evstr.
The string returned by sat_eventtostr and passed to sat_strtoevent is a
member of the set of known event names. For a complete list of known
event names, run the command:
sat_select -h
sat_reduce(1m)
sat_select(1m)
sat_summarize(1m)
sat_eventtostr returns unknown event #%d if event is not a positive
integer less than SAT_NTYPES. sat_strtoevent returns -1 if evstr is NULL
or points to an audit event of unrecognized type.
If this function is used in a program, then the library libmls must be
linked at compile time. For example the following command will perform
this link:
cc -DTRUSTEDIRIX -DLABELLEDSOCKETS programname.c -lmls
PPPPaaaaggggeeee 1111 [ Back ]
|