AUDITON(2) — SYSTEM CALLS

NAME

auditon − manipulate auditing

SYNOPSIS

#include <sys/label.h>
#include <sys/audit.h>

auditon (condition)
int condition;

DESCRIPTION

The auditon() system call sets system auditing to the requested condition if and only if the current state of auditing allows that transition. Legitimate values for condition are:

AUC_UNSET on/off has not been decided yet

AUC_AUDITING auditing is to be done

AUC_NOAUDIT auditing is not to be done

The permitted transitions are:

Any condition may be changed back to itself.

AUC_UNSET may be changed to AUC_AUDITING or AUC_NOAUDIT.

AUC_AUDITING may be changed to AUC_NOAUDIT.

AUC_NOAUDIT may be changed to AUC_AUDITING.

Once changed, it is not possible to get back to AUC_UNSET.

Only the super-user may successfully execute this call.

RETURN VALUE

If the call succeeds the old audit condition value is returned. If an error occurs, the value −1 is returned.

ERRORS

EPERM Neither of the process’s effective or real user ID is super-user.

EINVAL The condition specified is outside the range of valid values, or the current condition precludes the requested change.

Museum