audit_get_reply(3) — Linux manual page


AUDIT_GET_REPLY(3)           Linux Audit API          AUDIT_GET_REPLY(3)

NAME         top

       audit_get_reply - Get the audit system's reply

SYNOPSIS         top

       #include <libaudit.h>

       int audit_get_reply(int fd, struct audit_reply *rep, reply_t
       block, int peek);

DESCRIPTION         top

       This function gets the next data packet sent on the audit netlink
       socket. This function is usually called after sending a command
       to the audit system. fd should be an open file descriptor
       returned by audit_open. rep should be a data structure to put the
       reply in. block is of type reply_t which is either:
       GET_REPLY_BLOCKING and GET_REPLY_NONBLOCKING. peek, if non-zero,
       gets the data without dequeueing it from the netlink socket.

RETURN VALUE         top

       This function returns -errno on error, 0 if error response
       received, and positive value on success.

SEE ALSO         top


AUTHOR         top

       Steve Grubb

COLOPHON         top

       This page is part of the audit (Linux Audit) project.
       Information about the project can be found at 
       ⟨⟩.  If you have a bug
       report for this manual page, send it to
       This page was obtained from the project's upstream Git repository
       ⟨⟩ on
       2021-08-27.  (At that time, the date of the most recent commit
       that was found in the repository was 2021-08-21.)  If you
       discover any rendering problems in this HTML version of the page,
       or you believe there is a better or more up-to-date source for
       the page, or you have corrections or improvements to the
       information in this COLOPHON (which is not part of the original
       manual page), send a mail to

Red Hat                         Oct 2006              AUDIT_GET_REPLY(3)

Pages that refer to this page: audit_request_signal_info(3)audit_request_status(3)