auditctl2
Configure system audit parameters
Usage
#include <bsm/audit.h>
int
auditctl(const char *path);
Overview
The auditctl() system call directs the kernel to open a new audit trail log file. It requires an appropriate privilege. The auditctl() system call opens new files, but auditon(2) is used to disable the audit log.
Return values
The auditctl() function returns the value 0 if successful; otherwise the value -1 is returned and the global variable errno is set to indicate the error.
Errors
The auditctl() system call will fail if:
- [EINVAL]
-
The path is invalid.
- [EPERM]
-
The process does not have sufficient permission to complete the operation.
Releases
112 releases since Mac OS X 10.5; the text changed 1 time.