next up previous contents index
Next: 11.4.7 set_notify: Enable or Up: 11.4 oskit_avc_ss: AVC Interface Previous: 11.4.5 set_auditallow: Enable or

11.4.6 set_auditdeny: Enable or disable the auditing of denied permissions

 

SYNOPSIS

#include <oskit/flask/avc_ss.h>

OSKIT_COMDECL oskit_avc_ss_set_auditdeny(oskit_avc_ss_t *avc, oskit_security_id_t ssid, oskit_security_id_t tsid, oskit_security_class_t tclass, oskit_access_vector_t perms, oskit_u32_t seqno, oskit_bool_t enable);

DESCRIPTION

The oskit_avc_ss_set_auditdeny function enables or disables auditing of denied permissions for a SID pair and class. It has the same behavior as oskit_avc_ss_set_auditallow, except that it modifies the auditdeny vector and it is associated with the OSKIT_AVC_CALLBACK_AUDITDENY_ENABLE and OSKIT_AVC_CALLBACK_AUDITDENY_DISABLE events.

PARAMETERS

avc
The access vector cache.
ssid
The source SID.
tsid
The target SID.
tclass
The target object security class.
perms
The permissions.
seqno
The sequence number for the policy change.
enable
The boolean flag indicating whether to enable or disable.

RETURNS

Returns 0 on success, or an error code specified in <oskit/error.h>, on error.



Utah Flux Research Group