構造体定義書 - aa_log

typedef struct

No.	名称	属性	説明
1	aa_log_record
	version	aa_record_syntax_version
	event	aa_record_event_type	Event type
	pid	unsigned long	PID of the program logging the message
	task	unsigned long
	magic_token	unsigned long
	epoch	long	example: 12345679
	audit_sub_id	unsigned int	example: 12
	bitmask	int	Bitmask containing "r" "w" "x" etc
	audit_id	char *	example: 12345679.1234:12
	operation	char *	"Exec" "Ptrace", etc.
	denied_mask	char *	"r", "w", etc.
	requested_mask	char *
	fsuid	unsigned long	fsuid of task - if logged
	ouid	unsigned long	ouid of task - if logged
	profile	char *	The name of the profile
	name	char *
	name2	char *
	namespace	char *
	attribute	char *
	parent	unsigned long
	info	char *
	error_code	int	error_code returned if logged
	active_hat	char *
	net_family	char *
	net_protocol	char *
	net_sock_type	char *

aa_log_record