audit_flag_to_name(3)

audit_flag_to_name3

Convert the numeric rule-matching filter value to the rule-matching filter name

Usage

#include <libaudit.h>

const char *audit_flag_to_name(int flag);

Overview

audit_flag_to_name() converts the numeric rule-matching filter value (AUDIT_FILTER_TASK, AUDIT_FILTER_EXIT, AUDIT_FILTER_USER, AUDIT_FILTER_EXCLUDE, AUDIT_FILTER_FS) to the rule-matching filter name ("task", "exit", "user", "exclude", "filesystem"). flag is the numeric rule-matching filter value.

Return value

Returns NULL if an error occurs; otherwise, the return value is the rule-matching filter name.

Releases

Unchanged in 3 releases since Debian 12 (Bookworm).

  1. 12–Arch

Author

Steve Grubb

From audit 4.2.1-1 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.