xdas_get_next(3xdas)

xdas_get_next -- read next set of records from a previously opened audit stream

Synopsis

cc [flag ...] file ... -Kthread -leels [library] ...

#include <sys/xdas.h>

OM_uint32 xdas_get_next(
	OM_uint32 *minor_status,
	const xdas_audit_ref_t *das_ref,
	const xdas_audit_stream_t *audit_stream_ref,
	const OM_uint32 *max_records,
	const xdas_buffer_t *audit_record_buffer,
	OM_uint32 *no_of_records);

Description

The xdas_get_next(3xdas) function is a member of the Basic XDAS Conformance class.

xdas_get_next(3xdas) copies up to max-records complete records from the audit stream accessed by das_ref into the buffer, audit_record_buffer, previously allocated by the caller. The actual number of records retrieved by the function is returned in no_of_records.

The caller must possess the XDAS_AUDIT_READ authority.

If the function successfully reads one or more records from the audit stream, the cursor associated with the audit stream (referred to by das_ref) will be advanced to the next unread record in the stream.

If the call is unsuccessful, the position of the cursor is not changed.

If there are no more available audit records, no_of_records is set to 0 and the function returns XDAS_S_END.

If the size of the buffer, audit_record_buffer, allocated by the caller is too small to hold a single audit record, no_of_records is set to 0 and the function returns XDAS_S_BUFF_TOO_SMALL.

On success, xdas_get_next(3xdas) returns XDAS_S_COMPLETE.

Arguments

minor_status: (Output) Provides additional information when the function returns XDAS_S_FAILURE.
das_ref: (Input) A handle to the XDAS server, obtained from a previous call to xdas_initialise_session(3xdas).
audit_stream_ref: (Input) A handle to the XDAS audit stream, obtained from a previous call to xdas_open_audit_stream(3xdas).
max_records: (Input) The maximum number of records to be returned by the function in any one call.
audit_record_buffer: (Input) Pointer to the buffer to which the audit records are to be copied.
no_of_records: (Output) The number of records actually copied into audit_record_buffer.

Return values

XDAS_S_AUTHORISATION_FAILURE: The caller does not possess the correct authority.
XDAS_S_BUFF_TOO_SMALL: The buffer allocated by the caller is too small to hold a single audit record.
XDAS_S_COMPLETE: Successful completion.
XDAS_S_END: The end of the audit stream has been reached.
XDAS_S_FAILURE: An implementation-specific error or failure has occurred, such as missing required parameters, or a malloc failure.
XDAS_S_INVALID_DAS_REF: The specified audit service handle does not point to the audit daemon.
XDAS_S_INVALID_STREAM_REF: The specified audit stream handle is invalid.

References

xdas_initialise_session(3xdas)