xdas_parse_record(3xdas)

xdas_parse_record -- parse an audit event record in an audit record buffer

Synopsis

cc [flag ...] file ... -Kthread -leels [library] ...

#include <sys/xdas.h>

OM_uint32 xdas_parse_record(
	OM_uint32 *minor_status,
	const xdas_audit_ref_t *das_ref,
	const xdas_audit_desc_t *audit_record_buffer,
	const OM_uint32 record_number,
	xdas_audit_record_t *audit_record);

Description

The xdas_parse_record(3xdas) function is a member of the Basic XDAS Conformance class.

xdas_parse_record(3xdas) parses and decomposes a record number identified by record_number found in the audit record buffer, audit_record_buffer, which has been filled by a previous call to xdas_get_next(3xdas).

If record_number does not match a record within audit_record_buffer, xdas_parse_record(3xdas) returns XDAS_S_INVALID_RECORD_NUMBER.

On success, xdas_parse_record(3xdas) returns XDAS_S_COMPLETE.

Arguments

minor_status: (Output) Provides additional information when the function returns XDAS_S_FAILURE.
das_ref: (Input) A handle to the XDAS server, obtained from a previous call to xdas_initialise_session(3xdas).
audit_record_buffer: (Input) The handle to the audit record buffer, filled by a previous call to xdas_get_next(3xdas).
record_number: (Input) The number of the record to be retrieved from audit_record_buffer. The first record is referred to by a record_number of 0.
audit_record: (Input and output) The structure containing the fields of the parsed audit record.

Return values

XDAS_S_AUTHORISATION_FAILURE: The caller does not possess the correct authority.
XDAS_S_COMPLETE: Successful completion.
XDAS_S_FAILURE: An implementation specific error or failure has occurred, such as missing required parameters, or a malloc failure.
XDAS_S_INVALID_DAS_REF: The handle to the audit service does not point to the audit daemon.
XDAS_S_INVALID_EVENT_NO: The specified event number is invalid.
XDAS_S_INVALID_INITIATOR_INFO: The initiator information supplied has a syntax error.
XDAS_S_INVALID_OUTCOME: The specified outcome is invalid.
XDAS_S_INVALID_RECORD_NUMBER: The specified audit record number id invalid
XDAS_S_INVALID_TARGET_INFO: The specified target information has a syntax error.
XDAS_S_NO_AUDIT: The event specified does not need to be audited.
XDAS_S_NO_DECISION_YET: The audit service has insufficient information to decide if the event requires auditing.
XDAS_S_INVALID_EVENT_INFO: The specified audit event information is not valid.

References

xdas_get_next(3xdas), xdas_initialise_session(3xdas)