audit_request_status(3) — Linux manual page
AUDIT_REQUEST_STATUS(3) Linux Audit API AUDIT_REQUEST_STATUS(3)
NAME
audit_request_status - Request status of the audit system
SYNOPSIS
#include <libaudit.h>
int audit_request_status(int fd);
DESCRIPTION
audit_request_status requests that the kernel send status
structure describing various settings. The audit_status structure
is as follows:
struct audit_status {
__u32 mask; /* Bit mask for valid entries */
__u32 enabled; /* 1 = enabled, 0 = disabled */
__u32 failure; /* Failure-to-log action */
__u32 pid; /* pid of auditd process */
__u32 rate_limit; /* messages rate limit (per second) */
__u32 backlog_limit; /* waiting messages limit */
__u32 lost; /* messages lost */
__u32 backlog; /* messages waiting in queue */
};
RETURN VALUE
The return value is <= 0 on error, otherwise it is the netlink
sequence id number. This function can have any error that sendto
would encounter.
SEE ALSO
audit_open(3), audit_get_reply(3), auditd(8).
AUTHOR
Steve Grubb
COLOPHON
This page is part of the audit (Linux Audit) project.
Information about the project can be found at
⟨http://people.redhat.com/sgrubb/audit/⟩. If you have a bug
report for this manual page, send it to linux-audit@redhat.com.
This page was obtained from the project's upstream Git repository
⟨https://github.com/linux-audit/audit-userspace.git⟩ on
2024-06-14. (At that time, the date of the most recent commit
that was found in the repository was 2024-06-12.) If you
discover any rendering problems in this HTML version of the page,
or you believe there is a better or more up-to-date source for
the page, or you have corrections or improvements to the
information in this COLOPHON (which is not part of the original
manual page), send a mail to man-pages@man7.org