1AUDIT_DELETE_RULE_DATA(3) Linux Audit API AUDIT_DELETE_RULE_DATA(3)
2
3
4
6 audit_delete_rule_data - Delete audit rule
7
9 #include <libaudit.h>
10
11 int audit_delete_rule_data (int fd, struct audit_rule_data *rule, int
12 flags, int action);
13
14
16 audit_delete_rule_data is used to delete rules that are currently
17 loaded in the kernel. To delete a rule, you must set up the rules iden‐
18 tical to the one being deleted. See audit_add_rule_data for flag and
19 action definitions.
20
21
23 The return value is <= 0 on error, otherwise it is the netlink sequence
24 id number. This function can have any error that sendto would
25 encounter.
26
27
29 audit_add_rule_data(3), auditctl(8).
30
31
33 Steve Grubb
34
35
36
37Red Hat Oct 2006 AUDIT_DELETE_RULE_DATA(3)