Linux repositories inspector

audit_request_status(3)

Red Hat
Oct 2006

libaudit-dev

Header files and static library for security auditing

audit-libs-devel

Header files for libaudit

audit

User space tools for 2.6 kernel auditing

audit-devel

Header files for libaudit

NAME

audit_request_status - Request status of the audit system

SYNOPSIS

#include <libaudit.h>
int audit_request_status (int fd);

DESCRIPTION

audit_request_status requests that the kernel send status structure describing various settings. The audit_status structure is as follows:

struct audit_status { __u32 mask; /* Bit mask for valid entries */ __u32 enabled; /* 1 = enabled, 0 = disabled */ __u32 failure; /* Failure-to-log action */ __u32 pid; /* pid of auditd process */ __u32 rate_limit; /* messages rate limit (per second) */ __u32 backlog_limit; /* waiting messages limit */ __u32 lost; /* messages lost */ __u32 backlog; /* messages waiting in queue */ };

RETURN VALUE

The return value is <= 0 on error, otherwise it is the netlink sequence id number. This function can have any error that sendto would encounter.

AUTHOR

Steve Grubb
⇧ Top