1AUDIT_SET_FAILURE(3)            Linux Audit API           AUDIT_SET_FAILURE(3)
2
3
4

NAME

6       audit_set_failure - Set audit failure flag
7

SYNOPSIS

9       #include <libaudit.h>
10
11       int audit_set_failure(int fd, uint32_t failure);
12
13

DESCRIPTION

15       audit_set_failure sets the action that the kernel will perform when the
16       backlog limit is reached or when it encounters an error and cannot pro‐
17       ceed. Possible values are:
18
19
20       0 - AUDIT_FAIL_SILENT
21              Do  nothing,  report  nothing,  skip logging the record and con‐
22              tinue.
23
24
25       1 - AUDIT_FAIL_PRINTK [default]
26              Log the audit record using printk which  will  cause  subsequent
27              events to get written to syslog.
28
29
30       2 - AUDIT_FAIL_PANIC
31              Call  the  panic  function. This would be used to prevent use of
32              the machine upon loss of audit events.
33
34

RETURN VALUE

36       The return value is <= 0 on error, otherwise it is the netlink sequence
37       id  number.  This  function  can  have  any error that sendto would en‐
38       counter.
39
40

SEE ALSO

42       audit_set_backlog_limit(3), audit_open(3), auditd(8), auditctl(8).
43
44

AUTHOR

46       Steve Grubb
47
48
49
50Red Hat                            June 2015              AUDIT_SET_FAILURE(3)
Impressum