AUDIT(2) — SYSTEM CALLS

NAME

audit − write a record to the audit log

SYNOPSIS

#include <sys/label.h>
#include <sys/audit.h>

audit (record)
audit_record_t ∗record;

DESCRIPTION

The audit() system call is used to write a record to the system audit log file. The data pointed to by record is written to the audit log file. The data should be a well-formed audit record as described by audit.log(5). The kernel sets the time stamp value in the record and performs a minimal check on the data before writing it to the audit log file.

Only the super-user may successfully execute this call.

RETURN VALUE

If the call succeeds, a value of 0 is returned. If an error occurs, the value −1 is returned.

ERRORS

EPERM The process’s effective user ID is not super-user.

EINVAL The length specified in the audit record is too short, or more than MAXAUDITDATA.

EFAULT record points outside the process’s allocated address space.

Museum