audit_get_reply(3)

audit_get_reply3

Get the audit system's reply

Usage

#include <libaudit.h>

int audit_get_reply(int fd, struct audit_reply *rep, reply_t block, int peek);"

Overview

This function gets the next data packet sent on the audit netlink socket. This function is usually called after sending a command to the audit system. fd should be an open file descriptor returned by audit_open. rep should be a data structure to put the reply in. block is of type reply_t which is either: GET_REPLY_BLOCKING and GET_REPLY_NONBLOCKING. peek, if non-zero, gets the data without dequeueing it from the netlink socket.

Return value

This function returns -errno on error, 0 if error response received, and positive value on success.

Releases

10 releases since Debian 5.0 (Lenny); the text changed 3 times.

  1. 5.0–6.0
  2. 7–11
  3. 12–13
  4. Arch

Author

Steve Grubb

From audit 4.2.1-1 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.