1AUDIT_DELETE_RULE_DATA(3)       Linux Audit API      AUDIT_DELETE_RULE_DATA(3)
2
3
4

NAME

6       audit_delete_rule_data - Delete audit rule
7

SYNOPSIS

9       #include <libaudit.h>
10
11       int  audit_delete_rule_data(int  fd,  struct audit_rule_data *rule, int
12       flags, int action);
13
14

DESCRIPTION

16       audit_delete_rule_data is used  to  delete  rules  that  are  currently
17       loaded in the kernel. To delete a rule, you must set up the rules iden‐
18       tical to the one being deleted. See audit_add_rule_data  for  flag  and
19       action definitions.
20
21

RETURN VALUE

23       The return value is <= 0 on error, otherwise it is the netlink sequence
24       id number. This function can have  any  error  that  sendto  would  en‐
25       counter.
26
27

SEE ALSO

29       audit_add_rule_data(3), auditctl(8).
30
31

AUTHOR

33       Steve Grubb
34
35
36
37Red Hat                            Oct 2006          AUDIT_DELETE_RULE_DATA(3)