Skip to content
Mateusz Piotrowski edited this page Aug 11, 2016 · 3 revisions

au_to_attr()

General

au_to_attr() is a function which creates audit tokens (see au_token(3)). Functions generating very similar tokens are au_to_attr32() and au_to_attr64().

Prototype

The prototype is defined in sys/bsm/audit_record.h:

#if defined(_KERNEL) || defined(KERNEL)
token_t	*au_to_attr(struct vnode_au_info *vni);
token_t	*au_to_attr32(struct vnode_au_info *vni);
token_t	*au_to_attr64(struct vnode_au_info *vni);
#endif

It is not clear how to get access to these functions in a program.