From df5afa4fcd9725380f94ca6476248d4cc24f889a Mon Sep 17 00:00:00 2001 From: Ashlee Young Date: Sun, 29 Nov 2015 08:22:13 -0800 Subject: v2.4.4 audit sources Change-Id: I9315a7408817db51edf084fb4d27fbb492785084 Signed-off-by: Ashlee Young --- framework/src/audit/docs/ausearch_set_stop.3 | 37 ++++++++++++++++++++++++++++ 1 file changed, 37 insertions(+) create mode 100644 framework/src/audit/docs/ausearch_set_stop.3 (limited to 'framework/src/audit/docs/ausearch_set_stop.3') diff --git a/framework/src/audit/docs/ausearch_set_stop.3 b/framework/src/audit/docs/ausearch_set_stop.3 new file mode 100644 index 00000000..627bb822 --- /dev/null +++ b/framework/src/audit/docs/ausearch_set_stop.3 @@ -0,0 +1,37 @@ +.TH "AUSEARCH_SET_STOP" "3" "Feb 2007" "Red Hat" "Linux Audit API" +.SH NAME + ausearch_set_stop \- set the cursor position +.SH "SYNOPSIS" +.B #include +.sp +int ausearch_set_stop(auparse_state_t *au, austop_t where); + +.SH "DESCRIPTION" + +ausearch_set_stop determines where the internal cursor will stop when a search condition is met. The possible values are: + +.RS +.TP +.I AUSEARCH_STOP_EVENT +This one repositions the cursors to the first field of the first record of the event containing the items searched for. +.TP +.I AUSEARCH_STOP_RECORD +This one repositions the cursors to the first field of the record containing the items searched for. +.TP +.I AUSEARCH_STOP_FIELD +This one simply stops on the current field when the evaluation of the rules becomes true. +.RE + +.SH "RETURN VALUE" + +Returns \-1 if an error occurs; otherwise, 0 for success. + +.SH "SEE ALSO" + +.BR ausearch_add_item (3), +.BR ausearch_add_regex (3), +.BR ausearch_clear (3), +.BR ausearch_next_event (3). + +.SH AUTHOR +Steve Grubb -- cgit 1.2.3-korg