From df5afa4fcd9725380f94ca6476248d4cc24f889a Mon Sep 17 00:00:00 2001 From: Ashlee Young Date: Sun, 29 Nov 2015 08:22:13 -0800 Subject: v2.4.4 audit sources Change-Id: I9315a7408817db51edf084fb4d27fbb492785084 Signed-off-by: Ashlee Young --- framework/src/audit/docs/audit_open.3 | 34 ++++++++++++++++++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 framework/src/audit/docs/audit_open.3 (limited to 'framework/src/audit/docs/audit_open.3') diff --git a/framework/src/audit/docs/audit_open.3 b/framework/src/audit/docs/audit_open.3 new file mode 100644 index 00000000..6ec8eb0a --- /dev/null +++ b/framework/src/audit/docs/audit_open.3 @@ -0,0 +1,34 @@ +.TH "AUDIT_OPEN" "3" "Oct 2006" "Red Hat" "Linux Audit API" +.SH NAME +audit_open \- Open a audit netlink socket connection +.SH "SYNOPSIS" +.B #include +.sp +int audit_open (void); + +.SH "DESCRIPTION" + +audit_open creates a NETLINK_AUDIT socket for communication with the kernel part of the Linux Audit Subsystem. The audit system uses the ACK feature of netlink. This means that every message to the kernel will return a netlink status packet even if the operation succeeds. + +.SH "RETURN VALUE" + +Returns \-1 if an error occurs; otherwise, the return value is a descriptor referencing the socket. + +.SH ERRORS + +The +.BR audit_open () +function may fail and set +.I errno +for any of the errors specified for the +.BR socket (2) +and +.BR fcntl (2) +routines. + +.SH "SEE ALSO" + +.BR netlink (7). + +.SH AUTHOR +Steve Grubb -- cgit 1.2.3-korg