1AUDIT_RECEIVE_FILTER(9) Audit Interfaces AUDIT_RECEIVE_FILTER(9)
2
3
4
6 audit_receive_filter - apply all rules to the specified message type
7
9 int audit_receive_filter(int type, int pid, int uid, int seq,
10 void * data, size_t datasz, uid_t loginuid,
11 u32 sessionid, u32 sid);
12
14 type
15 audit message type
16
17 pid
18 target pid for netlink audit messages
19
20 uid
21 target uid for netlink audit messages
22
23 seq
24 netlink audit message sequence (serial) number
25
26 data
27 payload data
28
29 datasz
30 size of payload data
31
32 loginuid
33 loginuid of sender
34
35 sessionid
36 sessionid for netlink audit message
37
38 sid
39 SE Linux Security ID of sender
40
42Kernel Hackers Manual 2.6. June 2019 AUDIT_RECEIVE_FILTER(9)