audit_log_user_avc_message(3)

audit_log_user_avc_message3

Log a user avc message

Usage

#include <libaudit.h>

int audit_log_user_avc_message(intaudit_fd,int"type,constchar*"message,constchar*"hostname,constchar*"addr,constchar*"tty,uid_t"auid);"

Overview

This function will log a message to the audit system using a predefined message format. This function should be used by all apps that are SE Linux object managers. The function parameters are as follows:

audit_fd - The fd returned by audit_open
type - type of message, ex: AUDIT_USER_AVC
message - the message being sent
hostname - the hostname if known
addr - The network address of the user
tty - The tty of the user, if NULL will attempt to figure out
auid - The auid of the person related to the avc message

These values should correspond to who the message is about.

Return value

It returns the sequence number which is > 0 on success or <= 0 on error.

Errors

This function returns -1 on failure. Examine errno for more info.

Releases

10 releases since Debian 5.0 (Lenny); the text changed 5 times.

  1. 5.0–6.0
  2. 7
  3. 8–11
  4. 12
  5. 13
  6. Arch

Author

Steve Grubb

From audit 4.2.1-1 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.