1AUDIT_SET_PID(3)                Linux Audit API               AUDIT_SET_PID(3)
2
3
4

NAME

6       audit_set_pid - Set audit daemon process ID
7

SYNOPSIS

9       #include <libaudit.h>
10
11       int audit_set_pid(int fd, uint32_t pid, rep_wait_t wmode);
12
13

DESCRIPTION

15       audit_set_pid  tells  the  kernel  what the pid is of the audit daemon.
16       When the pid is set to 0, the kernel will log  all  events  to  syslog.
17       Otherwise it will try to send events to the netlink connection that has
18       the same pid given by this function. If for  some  reason  the  process
19       goes  away,  the  kernel  will automatically set the value to 0 itself.
20       Usually this function is called by the audit daemon and not an external
21       program.  If  wmode is WAIT_YES, the function will wait for an ACK from
22       the kernel.
23
24

RETURN VALUE

26       The return value is <= 0 on error, otherwise it is the netlink sequence
27       id  number.  This  function  can  have  any error that sendto would en‐
28       counter.
29
30

SEE ALSO

32       audit_open(3), auditd(8).
33
34

AUTHOR

36       Steve Grubb
37
38
39
40Red Hat                            Oct 2006                   AUDIT_SET_PID(3)