1AUDIT_SET_FAILURE(3)            Linux Audit API           AUDIT_SET_FAILURE(3)
2
3
4

NAME

6       audit_set_failure - Set audit failure flag
7

SYNOPSIS

9       #include <libaudit.h>
10
11       int audit_set_failure (int fd, int failure);
12
13

DESCRIPTION

15       audit_set_failure sets the action that the kernel will perform when the
16       backlog limit is reached or when it encounters an error and cannot pro‐
17       ceed. Possible values are:
18
19
20       0 - AUDIT_FAIL_PRINTK [default]
21              Log  the  audit  record using printk which will cause subsequent
22              events to get written to syslog.
23
24
25       1 - AUDIT_FAIL_SILENT
26              Do nothing, report nothing, skip logging  the  record  and  con‐
27              tinue.
28
29
30       2 - AUDIT_FAIL_PANIC
31              Call  the  panic  function. This would be used to prevent use of
32              the machine upon loss of audit events.
33
34

RETURN VALUE

36       The return value is <= 0 on error, otherwise it is the netlink sequence
37       id  number.  This  function  can  have  any  error  that  sendto  would
38       encounter.
39
40

SEE ALSO

42       audit_set_backlog(3), audit_open(3), auditd(8), auditctl(8).
43
44

AUTHOR

46       Steve Grubb
47
48
49
50Red Hat                            Oct 2006               AUDIT_SET_FAILURE(3)
Impressum