17c478bd9Sstevel@tonic-gate /* 27c478bd9Sstevel@tonic-gate * CDDL HEADER START 37c478bd9Sstevel@tonic-gate * 47c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the 5d75d0dc9Stz204579 * Common Development and Distribution License (the "License"). 6d75d0dc9Stz204579 * You may not use this file except in compliance with the License. 77c478bd9Sstevel@tonic-gate * 87c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 97c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 107c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions 117c478bd9Sstevel@tonic-gate * and limitations under the License. 127c478bd9Sstevel@tonic-gate * 137c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 147c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 157c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 167c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 177c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 187c478bd9Sstevel@tonic-gate * 197c478bd9Sstevel@tonic-gate * CDDL HEADER END 207c478bd9Sstevel@tonic-gate */ 217c478bd9Sstevel@tonic-gate /* 22*f8994074SJan Friedel * Copyright (c) 1992, 2010, Oracle and/or its affiliates. All rights reserved. 237c478bd9Sstevel@tonic-gate */ 247c478bd9Sstevel@tonic-gate 257c478bd9Sstevel@tonic-gate #include <sys/types.h> 267c478bd9Sstevel@tonic-gate #include <bsm/audit.h> 27*f8994074SJan Friedel #include <bsm/libbsm.h> 287c478bd9Sstevel@tonic-gate 297c478bd9Sstevel@tonic-gate /* 307c478bd9Sstevel@tonic-gate * getfauditflags() - combines system event flag mask with user event 317c478bd9Sstevel@tonic-gate * flag masks. 327c478bd9Sstevel@tonic-gate * 337c478bd9Sstevel@tonic-gate * input: usremasks->as_success - always audit on success 347c478bd9Sstevel@tonic-gate * usremasks->as_failure - always audit on failure 357c478bd9Sstevel@tonic-gate * usrdmasks->as_success - never audit on success 367c478bd9Sstevel@tonic-gate * usrdmasks->as_failure - never audit on failure 377c478bd9Sstevel@tonic-gate * 387c478bd9Sstevel@tonic-gate * output: lastmasks->as_success - audit on success 397c478bd9Sstevel@tonic-gate * lastmasks->as_failure - audit on failure 407c478bd9Sstevel@tonic-gate * 417c478bd9Sstevel@tonic-gate * returns: 0 - ok 42*f8994074SJan Friedel * -1 - error (cannot get attributable mask) 437c478bd9Sstevel@tonic-gate */ 447c478bd9Sstevel@tonic-gate int 45*f8994074SJan Friedel getfauditflags(au_mask_t *usremasks, au_mask_t *usrdmasks, au_mask_t *lastmasks) 467c478bd9Sstevel@tonic-gate { 47*f8994074SJan Friedel au_mask_t masks; 487c478bd9Sstevel@tonic-gate 497c478bd9Sstevel@tonic-gate /* get system audit mask and convert to bit mask */ 50*f8994074SJan Friedel if (auditon(A_GETAMASK, (caddr_t)&masks, sizeof (masks)) == -1) { 51*f8994074SJan Friedel return (-1); 52*f8994074SJan Friedel } 537c478bd9Sstevel@tonic-gate 547c478bd9Sstevel@tonic-gate /* combine system and user event masks */ 557c478bd9Sstevel@tonic-gate lastmasks->as_success = masks.as_success; 567c478bd9Sstevel@tonic-gate lastmasks->as_failure = masks.as_failure; 577c478bd9Sstevel@tonic-gate 587c478bd9Sstevel@tonic-gate lastmasks->as_success |= usremasks->as_success; 597c478bd9Sstevel@tonic-gate lastmasks->as_failure |= usremasks->as_failure; 607c478bd9Sstevel@tonic-gate 617c478bd9Sstevel@tonic-gate lastmasks->as_success &= ~(usrdmasks->as_success); 627c478bd9Sstevel@tonic-gate lastmasks->as_failure &= ~(usrdmasks->as_failure); 63*f8994074SJan Friedel 64*f8994074SJan Friedel return (0); 657c478bd9Sstevel@tonic-gate } 66