audit_request_status(3)

audit_request_status3

Request status of the audit system

Usage

#include <libaudit.h>

int audit_request_status(int fd);"

Overview

audit_request_status requests that the kernel send status structure describing various settings on the descriptor given in fd. The audit_status structure is as follows:

struct audit_status {
   __u32   mask;           /* Bit mask for valid entries */
   __u32   enabled;        /* 1 = enabled, 0 = disabled */
   __u32   failure;        /* Failure-to-log action */
   __u32   pid;            /* pid of auditd process */
   __u32   rate_limit;     /* messages rate limit (per second) */
   __u32   backlog_limit;  /* waiting messages limit */
   __u32   lost;           /* messages lost */
   __u32   backlog;        /* messages waiting in queue */
};

Return value

The return value is <= 0 on error, otherwise it is the netlink sequence id number. This function can have any error that sendto would encounter.

Releases

10 releases since Debian 5.0 (Lenny); the text changed 2 times.

  1. 5.0–11
  2. 12–13
  3. Arch

Author

Steve Grubb

From audit 4.2.1-1 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.