libaudit

package module

Go to main page

Versions in this module

v2

v2.2.3

Nov 5, 2021

v2.2.2

Oct 29, 2021

v2.2.1

Oct 29, 2021

Changes in this version

+ const AuditFeatureBitmapBacklogLimit — linux/amd64

+ const AuditFeatureBitmapBacklogWaitTime — linux/amd64

+ const AuditFeatureBitmapExcludeExtend — linux/amd64

+ const AuditFeatureBitmapExecutablePath — linux/amd64

+ const AuditFeatureBitmapLostReset — linux/amd64

+ const AuditFeatureBitmapSessionIDFilter — linux/amd64

+ const AuditGet — linux/amd64

+ const AuditMessageMaxLength — linux/amd64

+ const AuditSet — linux/amd64

+ const NetlinkGroupNone — linux/amd64

+ const NetlinkGroupReadLog — linux/amd64

+ func ParseNetlinkError(netlinkData []byte) error — linux/amd64

+ type AuditClient struct — linux/amd64

+ Netlink NetlinkSendReceiver

+ func NewAuditClient(resp io.Writer) (*AuditClient, error)

+ func NewMulticastAuditClient(resp io.Writer) (*AuditClient, error)

+ func (c *AuditClient) AddRule(rule []byte) error

+ func (c *AuditClient) Close() error

+ func (c *AuditClient) DeleteRule(rule []byte) error

+ func (c *AuditClient) DeleteRules() (int, error)

+ func (c *AuditClient) GetRules() ([][]byte, error)

+ func (c *AuditClient) GetStatus() (*AuditStatus, error)

+ func (c *AuditClient) GetStatusAsync(requireACK bool) (seq uint32, err error)

+ func (c *AuditClient) Receive(nonBlocking bool) (*RawAuditMessage, error)

+ func (c *AuditClient) SetBacklogLimit(limit uint32, wm WaitMode) error

+ func (c *AuditClient) SetBacklogWaitTime(waitTime int32, wm WaitMode) error

+ func (c *AuditClient) SetEnabled(enabled bool, wm WaitMode) error

+ func (c *AuditClient) SetFailure(fm FailureMode, wm WaitMode) error

+ func (c *AuditClient) SetImmutable(wm WaitMode) error

+ func (c *AuditClient) SetPID(wm WaitMode) error

+ func (c *AuditClient) SetRateLimit(perSecondLimit uint32, wm WaitMode) error

+ func (c *AuditClient) WaitForPendingACKs() error

+ type AuditFeatureBitmap uint32 — linux/amd64

+ type AuditStatus struct — linux/amd64

+ Backlog uint32

+ BacklogLimit uint32

+ BacklogWaitTime uint32

+ Enabled uint32

+ Failure uint32

+ FeatureBitmap uint32

+ Lost uint32

+ Mask AuditStatusMask

+ PID uint32

+ RateLimit uint32

+ func (s *AuditStatus) FromWireFormat(buf []byte) error

+ type AuditStatusMask uint32 — linux/amd64

+ const AuditStatusBacklogLimit

+ const AuditStatusBacklogWaitTime

+ const AuditStatusEnabled

+ const AuditStatusFailure

+ const AuditStatusLost

+ const AuditStatusPID

+ const AuditStatusRateLimit

+ type FailureMode uint32 — linux/amd64

+ const LogOnFailure

+ const PanicOnFailure

+ const SilentOnFailure

+ type NetlinkClient struct — linux/amd64

+ func NewNetlinkClient(proto int, groups uint32, readBuf []byte, resp io.Writer) (*NetlinkClient, error)

+ func (c *NetlinkClient) Close() error

+ func (c *NetlinkClient) Receive(nonBlocking bool, p NetlinkParser) ([]syscall.NetlinkMessage, error)

+ func (c *NetlinkClient) Send(msg syscall.NetlinkMessage) (uint32, error)

+ type NetlinkParser func([]byte) ([]syscall.NetlinkMessage, error) — linux/amd64

+ type NetlinkReceiver interface — linux/amd64

+ Receive func(nonBlocking bool, p NetlinkParser) ([]syscall.NetlinkMessage, error)

+ type NetlinkSendReceiver interface — linux/amd64

+ type NetlinkSender interface — linux/amd64

+ Send func(msg syscall.NetlinkMessage) (uint32, error)

+ type RawAuditMessage struct — linux/amd64

+ Data []byte

+ Type auparse.AuditMessageType

+ type Reassembler struct

+ func NewReassembler(maxInFlight int, timeout time.Duration, stream Stream) (*Reassembler, error)

+ func (r *Reassembler) Close() error

+ func (r *Reassembler) Maintain() error

+ func (r *Reassembler) Push(typ auparse.AuditMessageType, rawData []byte) error

+ func (r *Reassembler) PushMessage(msg *auparse.AuditMessage)

+ type Stream interface

+ EventsLost func(count int)

+ ReassemblyComplete func(msgs []*auparse.AuditMessage)

+ type WaitMode uint8 — linux/amd64

+ const NoWait

+ const WaitForReply

Other modules containing this package

github.com/CyberSift/go-libaudit

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL