1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
|
.TH "AUDIT_REQUEST_STATUS" "3" "Oct 2006" "Red Hat" "Linux Audit API"
.SH NAME
audit_request_status \- Request status of the audit system
.SH "SYNOPSIS"
.B #include <libaudit.h>
.sp
int audit_request_status (int fd);
.SH "DESCRIPTION"
.PP
audit_request_status requests that the kernel send status structure describing various settings. The audit_status structure is as follows:
.RS
.ta 4n 10n 24n
.nf
struct audit_status {
__u32 mask; /* Bit mask for valid entries */
__u32 enabled; /* 1 = enabled, 0 = disabled */
__u32 failure; /* Failure-to-log action */
__u32 pid; /* pid of auditd process */
__u32 rate_limit; /* messages rate limit (per second) */
__u32 backlog_limit; /* waiting messages limit */
__u32 lost; /* messages lost */
__u32 backlog; /* messages waiting in queue */
};
.fi
.ta
.RE
.SH "RETURN VALUE"
The return value is <= 0 on error, otherwise it is the netlink sequence id number. This function can have any error that sendto would encounter.
.SH "SEE ALSO"
.BR audit_open (3),
.BR audit_get_reply (3),
.BR auditd (8).
.SH AUTHOR
Steve Grubb
|
