getauditflagsbin() converts the character representation of audit values pointed to by auditstring into au_mask_t fields pointed to by masks. These fields indicate which events are to be audited when they succeed and which are to be audited when they fail. The character string syntax is described in audit_control(4).

getauditflagschar() converts the au_mask_t fields pointed to by masks into a string pointed to by auditstring. If verbose is zero, the short (2-character) flag names are used. If verbose is non-zero, the long flag names are used. auditstring should be large enough to contain the ASCII representation of the events.

auditstring contains a series of event names, each one identifying a single audit class, separated by commas. The au_mask_t fields pointed to by masks correspond to binary values defined in <bsm/audit.h>, which is read by <bsm/libbsm.h>.

getauditflagsbin() and getauditflagschar(): -1 is returned on error and 0 on success.

See attributes(5) for descriptions of the following attributes:

bsmconv(1M), audit.log(4), audit_control(4), attributes(5)

This is not a very extensible interface.

The functionality described in this man page is available only if the Basic Security Module (BSM) has been enabled. See bsmconv(1M) for more information.