audit_get_reply(3) — Linux manual page


AUDIT_GET_REPLY(3)             Linux Audit API            AUDIT_GET_REPLY(3)

NAME         top

       audit_get_reply - Get the audit system's reply

SYNOPSIS         top

       #include <libaudit.h>

       int audit_get_reply(int fd, struct audit_reply *rep, reply_t block,
       int peek);

DESCRIPTION         top

       This function gets the next data packet sent on the audit netlink
       socket. This function is usually called after sending a command to
       the audit system. fd should be an open file descriptor returned by
       audit_open. rep should be a data structure to put the reply in. block
       is of type reply_t which is either: GET_REPLY_BLOCKING and
       GET_REPLY_NONBLOCKING. peek, if non-zero, gets the data without
       dequeueing it from the netlink socket.

RETURN VALUE         top

       This function returns -1 on error, 0 if error response received, and
       positive value on success.

SEE ALSO         top


AUTHOR         top

       Steve Grubb

COLOPHON         top

       This page is part of the audit (Linux Audit) project.  Information
       about the project can be found at 
       ⟨⟩.  If you have a bug report
       for this manual page, send it to  This page
       was obtained from the project's upstream Git repository
       ⟨⟩ on 2020-09-18.
       (At that time, the date of the most recent commit that was found in
       the repository was 2020-09-07.)  If you discover any rendering prob‐
       lems in this HTML version of the page, or you believe there is a bet‐
       ter or more up-to-date source for the page, or you have corrections
       or improvements to the information in this COLOPHON (which is not
       part of the original manual page), send a mail to

Red Hat                           Oct 2006                AUDIT_GET_REPLY(3)

Pages that refer to this page: audit_request_signal_info(3)audit_request_status(3)