audit_dpms_spi.3 (2010 09)

a
audit_dpms_spi(3) audit_dpms_spi(3)
NAME
audit_dpms_spi: audit_dpm_start(), audit_dpm_end(), audit_dpm_read_event(), audit_dpm_write_event()
- Audit DPMS Service Provider Interface
SYNOPSIS
#include <audit_dpms.h>
#include <audit_dpms_spi.h>
cc [flag]... file...
-laudit_dpms [library]...
int audit_dpm_start(const char *module,
const audit_dpms_stream_type_t stream_type, const void * stream,
const char *options, const int version, audit_dpms_handle_t **dpmh);
int audit_dpm_end(audit_dpms_handle_t *dpmh);
int audit_dpm_read_event(audit_dpms_handle_t *dpmh,
audit_dpms_event_origin_t *origin,
audit_dpms_event_header_t *header,
audit_dpms_event_subject_t *subject,
audit_dpms_event_object_t *object,
audit_dpms_event_details_t *details, char *buffer);
int audit_dpm_write_event(audit_dpms_handle_t *dpmh,
audit_dpms_event_origin_t *origin,
audit_dpms_event_header_t *header,
audit_dpms_event_subject_t *subject,
audit_dpms_event_object_t *object,
audit_dpms_event_details_t *details, char *buffer);
DESCRIPTION
The Audit Data Process Module Switch (Audit DPMS) Service Provider Interface (SPI) defines a module
that manages audit data in a customized format. These service modules can then be plugged in and made
available, without modifying applications, to read or write audit data in any format managed by the
module.
The DPMS framework consists of a DPMS interface library,
libaudit_dpms
, and multiple DPMS ser-
vice modules. The interface library interfaces are described in audit_dpms_api(3). The DPMS service
modules that are provided with HP-UX are described in audit_hpux_portable(5), audit_hpux_raw(5), and
audit_hpux_xml(5).
The DPMS service modules are dynamically loadable shared libraries that normally reside in one of the
following locations:
/usr/lib/security/
module.sl
/usr/lib/security/pa20_64/
module.sl
/usr/lib/security/hpux32/module.so
/usr/lib/security/hpux64/module.so
where module is the name of the DPMS service module.
Each DPMS service module must provide all of the
audit_dpms_spi() interfaces. The
audit_dpms_spi() interfaces are very similar to audit_dpms_api()
interfaces. Applications call
the
audit_dpms_api() interfaces, residing in the libaudit_dpms
library. These interfaces then
call the corresponding
audit_dpms_spi() interfaces in the DPMS service modules, using the same
arguments and return values to read and write audit data.
Interface Descriptions
audit_dpm_start()
This function is called by audit_dpms_start() to perform any additional
initialization required by the DPMS service module. The arguments are the
same as the audit_dpms_start() arguments.
audit_dpm_end()
This function is called by audit_dpms_end(), after use of a DPMS service
module has been completed, to free all resources that were allocated by the
module. The arguments are the same as the audit_dpms_end() argu-
ments.
HP-UX 11i Version 3: September 2010 − 1 − Hewlett-Packard Company 1