unixdev.net


Switch to SpeakEasy.net DSL

The Modular Manual Browser

Home Page
Manual: (SunOS-4.1.3)
Page:
Section:
Apropos / Subsearch:
optional field

AUDITSVC(2)                   System Calls Manual                  AUDITSVC(2)



NAME
       auditsvc - write audit records to specified file descriptor

SYNOPSIS
       int auditsvc(fd, limit)
       int fd;
       int limit;

DESCRIPTION
       The  auditsvc() system call specifies the audit log file to the kernel.
       The kernel writes audit records to this file until an exceptional  con-
       dition  occurs  and  then the call returns.  The parameter fd is a file
       descriptor that identifies the audit file.  Programs should  open  this
       file for writing before calling auditsvc().  The parameter limit speci-
       fies a value between 0 and 100, instructing auditsvc() to  return  when
       the  percentage  of free disk space on the audit filesystem drops below
       this limit.  Thus, the invoking program can take action to  avoid  run-
       ning  out  of  disk  space.  The auditsvc() system call does not return
       until one of the following conditions occurs:

       o  The process receives a signal that is not blocked or ignored.

       o  An error is encountered writing to the audit log file.

       o  The minimum free space (as specified by limit), has been reached.

       Only processes with a real or effective user ID of super-user may  exe-
       cute this call successfully.

RETURN VALUES
       auditsvc() returns only on an error.

ERRORS
       EAGAIN         The descriptor referred to a stream, was marked for Sys-
                      tem V-style non-blocking I/O, and no data could be writ-
                      ten immediately.

       EBADF          fd is not a valid descriptor open for writing.

       EBUSY          A second process attempted to perform this call.

                      A second process attempted to perform this call.

       EDQUOT         The  user's quota of disk blocks on the file system con-
                      taining the file has been exhausted.

                      Audit filesystem space is below the specified limit.

       EFBIG          An attempt was made to write a  file  that  exceeds  the
                      process's file size limit or the maximum file size.

       EINTR          The  call  is forced to terminate prematurely due to the
                      arrival of a signal whose SV_INTERRUPT bit  in  sv_flags
                      is  set   (see  sigvec(2)).  signal(3V), in the System V
                      compatibility library, sets this bit for any  signal  it
                      catches.

       EINVAL         Auditing is disabled (see auditon(2)).

                      fd  does  not  refer  to  a file of an appropriate type.
                      Regular files are always appropriate.

       EIO            An I/O error occurred while reading from or  writing  to
                      the file system.

       ENOSPC         There is no free space remaining on the file system con-
                      taining the file.

       ENXIO          A hangup occurred on the stream being written to.

       EPERM          The process's effective or real user ID  is  not  super-
                      user.

       EWOULDBLOCK    The  file  was marked for 4.2BSD-style non-blocking I/O,
                      and no data could be written immediately.

SEE ALSO
       audit(2), auditon(2), sigvec(2), signal(3V), audit.log(5), auditd(8)



                                21 January 1990                    AUDITSVC(2)