audgenl(3x)audgenl(3x)Nameaudgenl - generate an audit record
Syntax
#include<sys/audit.h>
int audgenl (event [ ,token_type, token_val] ... , 0 )
unsigned event;
Arguments
event
An integer that indicates the event type of the operation being
audited.
token_type,token_val
A type and value pair defining the data to be placed in the audit
record.
Description
This routine is an interface to the system call. It accepts a variable
number of arguments describing the event and audit data, then calls
with the appropriate parameters to generate the audit record. This
routine is found in the library and is loaded with the -laud option.
The argument event is an integer indicating the event type of the oper‐
ation being audited, as defined in The value of event must be between
MIN_TRUSTED_EVENT and MIN_TRUSTED_EVENT + N_TRUSTED_EVENTS-1, as
defined in The argument pairs containing token_type and token_val
describe the data that is to be placed into the audit record. The
argument token_type describes the type of data, as defined in
The argument token_val should be set to the value of the token when the
token is represented by an int or short data type, or be a pointer to
the data described by the token when the token references a character
string.
Restrictions
The system call is privileged.
The maximum number of token_type, token_val pairs allowed is 8.
Return Values
On successful completion, a value of 0 is returned. Otherwise, a value
of -1 is returned and the global integer variable errno is set to indi‐
cate the error.
Diagnostics
[EACCES] The user is not privileged for this operation.
[EINVAL] The value supplied for an argument is invalid.
See Alsoaudgenl(3x)
