blob: 72f8bef9768841f3d98085119c6d903bf15a0e7d (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
|
/*
* CDDL HEADER START
*
* The contents of this file are subject to the terms of the
* Common Development and Distribution License (the "License").
* You may not use this file except in compliance with the License.
*
* You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
* or http://www.opensolaris.org/os/licensing.
* See the License for the specific language governing permissions
* and limitations under the License.
*
* When distributing Covered Code, include this CDDL HEADER in each
* file and include the License file at usr/src/OPENSOLARIS.LICENSE.
* If applicable, add the following below this CDDL HEADER, with the
* fields enclosed by brackets "[]" replaced with your own identifying
* information: Portions Copyright [yyyy] [name of copyright owner]
*
* CDDL HEADER END
*/
/*
* Copyright (c) 2000, 2010, Oracle and/or its affiliates. All rights reserved.
*/
#include <sys/types.h>
#include <unistd.h>
#include <stdlib.h>
#include <bsm/audit.h>
#include <bsm/audit_record.h>
#include <bsm/audit_uevents.h>
#include <bsm/libbsm.h>
#include <bsm/audit_private.h>
#include <generic.h>
#ifdef C2_DEBUG
#define dprintf(x) { (void) printf x; }
#else
#define dprintf(x)
#endif
static int audit_reboot_generic(int);
int
audit_reboot_setup()
{
dprintf(("audit_reboot_setup()\n"));
if (cannot_audit(0)) {
return (0);
}
(void) aug_init();
aug_save_event(AUE_reboot_solaris);
(void) aug_save_me();
return (0);
}
int
audit_reboot_fail()
{
return (audit_reboot_generic(-1));
}
int
audit_reboot_success()
{
int res = 0;
(void) audit_reboot_generic(0);
/*
* wait for audit daemon
* to put reboot message onto audit trail
*/
if (!cannot_audit(0)) {
int cond = AUC_NOAUDIT;
int canaudit;
(void) sleep(1);
/* find out if audit daemon is running */
(void) auditon(A_GETCOND, (caddr_t)&cond, sizeof (cond));
canaudit = ((cond == AUC_AUDITING) || (cond == AUC_NOSPACE));
/* turn off audit daemon and try to flush audit queue */
if (canaudit && system("/usr/sbin/audit -T"))
res = -1;
(void) sleep(5);
}
return (res);
}
int
audit_reboot_generic(int sorf)
{
dprintf(("audit_reboot_generic(%d)\n", sorf));
if (cannot_audit(0)) {
return (0);
}
aug_save_sorf(sorf);
(void) aug_audit();
return (0);
}
|
