bionic (3) audit_set_pid.3.gz

NAME

       audit_set_pid - Set audit daemon process ID

SYNOPSIS

       #include <libaudit.h>

       int audit_set_pid (int fd, int pid);

DESCRIPTION

       audit_set_pid  tells the kernel what the pid is of the audit daemon. When the pid is set to 0, the kernel
       will log all events to syslog. Otherwise it will try to send events to the netlink  connection  that  has
       the  same  pid  given  by  this  function.  If  for  some  reason  the process goes away, the kernel will
       automatically set the value to 0 itself. Usually this function is called by the audit daemon and  not  an
       external program.

RETURN VALUE

       The return value is <= 0 on error, otherwise it is the netlink sequence id number. This function can have
       any error that sendto would encounter.

SEE ALSO

       audit_open(3), auditd(8).

AUTHOR

       Steve Grubb