libaudit

package module

Go to main page

Versions in this module

v2

v2.3.10

May 24, 2024

v2.3.9

Mar 28, 2024

v2.3.8

Oct 31, 2023

v2.3.7

Oct 6, 2023

v2.3.6

Oct 2, 2023

v2.3.5

Jan 16, 2023

v2.3.4

Jan 9, 2023

v2.3.3

Jan 9, 2023

Changes in this version

+ const AuditFeatureBitmapBacklogLimit — linux/amd64

+ const AuditFeatureBitmapBacklogWaitTime — linux/amd64

+ const AuditFeatureBitmapExcludeExtend — linux/amd64

+ const AuditFeatureBitmapExecutablePath — linux/amd64

+ const AuditFeatureBitmapLostReset — linux/amd64

+ const AuditFeatureBitmapSessionIDFilter — linux/amd64

+ const AuditGet — linux/amd64

+ const AuditMessageMaxLength — linux/amd64

+ const AuditSet — linux/amd64

+ const MinSizeofAuditStatus — linux/amd64

+ const NetlinkGroupNone — linux/amd64

+ const NetlinkGroupReadLog — linux/amd64

+ func ParseNetlinkError(netlinkData []byte) error — linux/amd64

+ type AuditClient struct — linux/amd64

+ Netlink NetlinkSendReceiver

+ func NewAuditClient(resp io.Writer) (*AuditClient, error)

+ func NewMulticastAuditClient(resp io.Writer) (*AuditClient, error)

+ func (c *AuditClient) AddRule(rule []byte) error

+ func (c *AuditClient) Close() error

+ func (c *AuditClient) DeleteRule(rule []byte) error

+ func (c *AuditClient) DeleteRules() (int, error)

+ func (c *AuditClient) GetRules() ([][]byte, error)

+ func (c *AuditClient) GetStatus() (*AuditStatus, error)

+ func (c *AuditClient) GetStatusAsync(requireACK bool) (seq uint32, err error)

+ func (c *AuditClient) Receive(nonBlocking bool) (*RawAuditMessage, error)

+ func (c *AuditClient) SetBacklogLimit(limit uint32, wm WaitMode) error

+ func (c *AuditClient) SetBacklogWaitTime(waitTime int32, wm WaitMode) error

+ func (c *AuditClient) SetEnabled(enabled bool, wm WaitMode) error

+ func (c *AuditClient) SetFailure(fm FailureMode, wm WaitMode) error

+ func (c *AuditClient) SetImmutable(wm WaitMode) error

+ func (c *AuditClient) SetPID(wm WaitMode) error

+ func (c *AuditClient) SetRateLimit(perSecondLimit uint32, wm WaitMode) error

+ func (c *AuditClient) WaitForPendingACKs() error

+ type AuditFeatureBitmap uint32 — linux/amd64

+ type AuditStatus struct — linux/amd64

+ Backlog uint32

+ BacklogLimit uint32

+ BacklogWaitTime uint32

+ BacklogWaitTimeActual uint32

+ Enabled uint32

+ Failure uint32

+ FeatureBitmap uint32

+ Lost uint32

+ Mask AuditStatusMask

+ PID uint32

+ RateLimit uint32

+ func (s *AuditStatus) FromWireFormat(buf []byte) error

+ type AuditStatusMask uint32 — linux/amd64

+ const AuditStatusBacklogLimit

+ const AuditStatusBacklogWaitTime

+ const AuditStatusEnabled

+ const AuditStatusFailure

+ const AuditStatusLost

+ const AuditStatusPID

+ const AuditStatusRateLimit

+ type FailureMode uint32 — linux/amd64

+ const LogOnFailure

+ const PanicOnFailure

+ const SilentOnFailure

+ type NetlinkClient struct — linux/amd64

+ func NewNetlinkClient(proto int, groups uint32, readBuf []byte, resp io.Writer) (*NetlinkClient, error)

+ func (c *NetlinkClient) Close() error

+ func (c *NetlinkClient) Receive(nonBlocking bool, p NetlinkParser) ([]syscall.NetlinkMessage, error)

+ func (c *NetlinkClient) Send(msg syscall.NetlinkMessage) (uint32, error)

+ type NetlinkParser func([]byte) ([]syscall.NetlinkMessage, error) — linux/amd64

+ type NetlinkReceiver interface — linux/amd64

+ Receive func(nonBlocking bool, p NetlinkParser) ([]syscall.NetlinkMessage, error)

+ type NetlinkSendReceiver interface — linux/amd64

+ type NetlinkSender interface — linux/amd64

+ Send func(msg syscall.NetlinkMessage) (uint32, error)

+ type RawAuditMessage struct — linux/amd64

+ Data []byte

+ Type auparse.AuditMessageType

+ type Reassembler struct

+ func NewReassembler(maxInFlight int, timeout time.Duration, stream Stream) (*Reassembler, error)

+ func (r *Reassembler) Close() error

+ func (r *Reassembler) Maintain() error

+ func (r *Reassembler) Push(typ auparse.AuditMessageType, rawData []byte) error

+ func (r *Reassembler) PushMessage(msg *auparse.AuditMessage)

+ type Stream interface

+ EventsLost func(count int)

+ ReassemblyComplete func(msgs []*auparse.AuditMessage)

+ type WaitMode uint8 — linux/amd64

+ const NoWait

+ const WaitForReply

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL