1AUDIT_REQUEST_STATUS(3)         Linux Audit API        AUDIT_REQUEST_STATUS(3)
2
3
4

NAME

6       audit_request_status - Request status of the audit system
7

SYNOPSIS

9       #include <libaudit.h>
10
11       int audit_request_status(int fd);
12
13

DESCRIPTION

15       audit_request_status requests that the kernel send status structure de‐
16       scribing various settings. The audit_status structure is as follows:
17
18
19              struct audit_status {
20                 __u32   mask;           /* Bit mask for valid entries */
21                 __u32   enabled;        /* 1 = enabled, 0 = disabled */
22                 __u32   failure;        /* Failure-to-log action */
23                 __u32   pid;            /* pid of auditd process */
24                 __u32   rate_limit;     /* messages rate limit (per second) */
25                 __u32   backlog_limit;  /* waiting messages limit */
26                 __u32   lost;           /* messages lost */
27                 __u32   backlog;        /* messages waiting in queue */
28              };
29
30

RETURN VALUE

32       The return value is <= 0 on error, otherwise it is the netlink sequence
33       id  number.  This  function  can  have  any error that sendto would en‐
34       counter.
35
36

SEE ALSO

38       audit_open(3), audit_get_reply(3), auditd(8).
39
40

AUTHOR

42       Steve Grubb
43
44
45
46Red Hat                            Oct 2006            AUDIT_REQUEST_STATUS(3)