audit_log_user_comm_message(3) — Linux manual page



NAME         top

       audit_log_user_comm_message - log a user message from a console app

SYNOPSIS         top

       #include <libaudit.h>

       int audit_log_user_comm_message(int audit_fd, int type, const char
       *message, const char *comm, const char *hostname, const char *addr,
       const char *tty, int result)

DESCRIPTION         top

       This function will log a message to the audit system using a
       predefined message format. This function should be used by all non-
       ELF console apps that do not manipulate accounts, groups, or need to
       log execution of a script. An example would be a Python script
       recording an event. The function parameters are as follows:

       audit_fd - The fd returned by audit_open
       type - type of message, ex: AUDIT_USYS_CONFIG, AUDIT_USER_LOGIN
       message - the message text being sent
       comm - the program command line name, NULL if unknown
       hostname - the hostname if known, NULL if unknown
       addr - The network address of the user, NULL if unknown
       tty - The tty of the user, if NULL will attempt to figure out
       result - 1 is "success" and 0 is "failed"

RETURN VALUE         top

       It returns the sequence number which is > 0 on success or <= 0 on

ERRORS         top

       This function returns -1 on failure. Examine errno for more info.

SEE ALSO         top

       audit_log_user_message(3), audit_log_acct_message(3),
       audit_log_user_avc_message(3), audit_log_semanage_message(3).

AUTHOR         top

       Steve Grubb

COLOPHON         top

       This page is part of the audit (Linux Audit) project.  Information
       about the project can be found at 
       ⟨⟩.  If you have a bug report
       for this manual page, send it to  This page
       was obtained from the project's upstream Git repository
       ⟨⟩ on 2020-08-13.
       (At that time, the date of the most recent commit that was found in
       the repository was 2020-07-30.)  If you discover any rendering prob‐
       lems in this HTML version of the page, or you believe there is a bet‐
       ter or more up-to-date source for the page, or you have corrections
       or improvements to the information in this COLOPHON (which is not
       part of the original manual page), send a mail to

Red Hat                           July 2016   AUDIT_LOG_USER_COMM_MESSAGE(3)

Pages that refer to this page: audit_encode_nv_string(3)audit_log_acct_message(3)audit_log_semanage_message(3)audit_log_user_command(3)audit_log_user_message(3)