Man page - audit_set_failure(3)
Packages contains this manual
- audit_close(3)
- audit_log_user_avc_message(3)
- audit_syscall_to_name(3)
- audit_set_enabled(3)
- audit_log_acct_message(3)
- audit_request_signal_info(3)
- audit_name_to_syscall(3)
- set_aumessage_mode(3)
- audit_getloginuid(3)
- audit_get_reply(3)
- audit_log_user_comm_message(3)
- audit_setloginuid(3)
- audit_delete_rule_data(3)
- audit_name_to_flag(3)
- audit_name_to_action(3)
- audit_encode_nv_string(3)
- audit_log_user_command(3)
- audit_fstype_to_name(3)
- audit_get_session(3)
- audit_set_failure(3)
- audit_encode_value(3)
- audit_name_to_errno(3)
- audit_detect_machine(3)
- audit_log_user_message(3)
- audit_set_backlog_limit(3)
- audit_flag_to_name(3)
- audit_is_enabled(3)
- audit_update_watch_perms(3)
- audit_name_to_fstype(3)
- audit_request_rules_list_data(3)
- get_auditfail_action(3)
- audit_request_status(3)
- audit_set_pid(3)
- audit_set_rate_limit(3)
- audit_log_semanage_message(3)
- audit_add_rule_data(3)
- audit_open(3)
- audit_value_needs_encoding(3)
- audit_set_backlog_wait_time(3)
- audit_add_watch(3)
apt-get install libaudit-dev
Manual
AUDIT_SET_FAILURE
NAMESYNOPSIS
DESCRIPTION
RETURN VALUE
SEE ALSO
AUTHOR
NAME
audit_set_failure - Set audit failure flag
SYNOPSIS
#include <libaudit.h>
int audit_set_failure(int fd, uint32_t failure);
DESCRIPTION
audit_set_failure
sets the action that the kernel will perform when the
backlog limit is reached or when it encounters an error and
cannot proceed. Possible values are:
0 - AUDIT_FAIL_SILENT
Do nothing, report nothing, skip logging the record and continue.
1 - AUDIT_FAIL_PRINTK [default]
Log the audit record using printk which will cause subsequent events to get written to syslog.
2 - AUDIT_FAIL_PANIC
Call the panic function. This would be used to prevent use of the machine upon loss of audit events.
RETURN VALUE
The return value is <= 0 on error, otherwise it is the netlink sequence id number. This function can have any error that sendto would encounter.
SEE ALSO
audit_set_backlog_limit (3), audit_open (3), auditd (8), auditctl (8).
AUTHOR
Steve Grubb