NAME

       audit_open - Open a audit netlink socket connection

SYNOPSIS

       #include <libaudit.h>

       int audit_open(void);

DESCRIPTION

       audit_open  creates  a  NETLINK_AUDIT  socket  for  communication with the kernel part of the Linux Audit
       Subsystem. The audit system uses the ACK feature of netlink. This means that every message to the  kernel
       will return a netlink status packet even if the operation succeeds.

RETURN VALUE

       Returns -1 if an error occurs; otherwise, the return value is a descriptor referencing the socket.

ERRORS

       The  audit_open()  function  may fail and set errno for any of the errors specified for the socket(2) and
       fcntl(2) routines.

SEE ALSO

       netlink(7).

AUTHOR

       Steve Grubb

Red Hat                                             Oct 2006                                       AUDIT_OPEN(3)