AUDIT_GET_REPLY(3) Linux Audit API AUDIT_GET_REPLY(3)
audit_get_reply - Get the audit system's reply
#include <libaudit.h> int audit_get_reply(int fd, struct audit_reply *rep, reply_t block, int peek);
This function gets the next data packet sent on the audit netlink socket. This function is usually called after sending a command to the audit system. fd should be an open file descriptor returned by audit_open. rep should be a data structure to put the reply in. block is of type reply_t which is either: GET_REPLY_BLOCKING and GET_REPLY_NONBLOCKING. peek, if non-zero, gets the data without dequeueing it from the netlink socket.
This function returns -1 on error, 0 if error response received, and positive value on success.
This page is part of the audit (Linux Audit) project. Information about the project can be found at ⟨http://people.redhat.com/sgrubb/audit/⟩. If you have a bug report for this manual page, send it to firstname.lastname@example.org. This page was obtained from the project's upstream Git repository ⟨https://github.com/linux-audit/audit-userspace.git⟩ on 2020-07-14. (At that time, the date of the most recent commit that was found in the repository was 2020-07-13.) If you discover any rendering prob‐ lems in this HTML version of the page, or you believe there is a bet‐ ter or more up-to-date source for the page, or you have corrections or improvements to the information in this COLOPHON (which is not part of the original manual page), send a mail to email@example.com Red Hat Oct 2006 AUDIT_GET_REPLY(3)
Pages that refer to this page: audit_request_signal_info(3), audit_request_status(3)