1__AUDIT_SYSCALL_EXIT(9)        Audit Interfaces        __AUDIT_SYSCALL_EXIT(9)
2
3
4

NAME

6       __audit_syscall_exit - deallocate audit context after a system call
7

SYNOPSIS

9       void __audit_syscall_exit(int success, long return_code);
10

ARGUMENTS

12       success
13           success value of the syscall
14
15       return_code
16           return value of the syscall
17

DESCRIPTION

19       Tear down after system call. If the audit context has been marked as
20       auditable (either because of the AUDIT_RECORD_CONTEXT state from
21       filtering, or because some other part of the kernel wrote an audit
22       message), then write out the syscall information. In call cases, free
23       the names stored from getname.
24

26Kernel Hackers Manual 3.10         June 2019           __AUDIT_SYSCALL_EXIT(9)
Impressum