1AUDIT_SET_BACKLOG_LIMIT(3) Library Functions Manual AUDIT_SET_BACKLOG_LIMIT(3)
2
3
4

NAME

6       audit_set_backlog_limit - Set the audit backlog limit
7

SYNOPSIS

9       #include <libaudit.h>
10
11       int audit_set_backlog_limit(int fd, uint32_t limit);
12
13

DESCRIPTION

15       audit_set_backlog_limit sets the queue length for audit events awaiting
16       transfer to the audit daemon. The default value is 64 which can  poten‐
17       tially  be  overrun  by  bursts  of activity. When the backlog limit is
18       reached, the kernel consults the failure_flag to  see  what  action  to
19       take.
20
21

RETURN VALUE

23       The return value is <= 0 on error, otherwise it is the netlink sequence
24       id number. This function can have  any  error  that  sendto  would  en‐
25       counter.
26
27

SEE ALSO

29       audit_set_failure(3), audit_open(3), auditd(8), auditctl(8).
30
31

AUTHOR

33       Steve Grubb
34
35
36
37Linux Audit API                    Oct 2006         AUDIT_SET_BACKLOG_LIMIT(3)