NAME

       audit_open - Open a audit netlink socket connection

SYNOPSIS

       #include <libaudit.h>

       int audit_open (void);

DESCRIPTION

       audit_open  creates  a  NETLINK_AUDIT socket for communication with the kernel part of the
       Linux Audit Subsystem. The audit system uses the ACK feature of netlink. This  means  that
       every  message  to  the  kernel  will return a netlink status packet even if the operation
       succeeds.

RETURN VALUE

       Returns -1 if an error occurs; otherwise, the return value is a descriptor referencing the
       socket.

ERRORS

       The  audit_open()  function may fail and set errno for any of the errors specified for the
       socket(2) and fcntl(2) routines.

SEE ALSO

       netlink(7).

AUTHOR

       Steve Grubb