audit_log_user_command

AUDIT_LOG_USER_COMMAND(3)       Linux Audit API      AUDIT_LOG_USER_COMMAND(3)



NAME
       audit_log_user_command - log a user command

SYNOPSIS
       #include <libaudit.h>

       int audit_log_user_command(int audit_fd, int type, const char *command,
       const char *tty, int result);


DESCRIPTION
       This function will log a command to the audit system using a predefined
       message format. It encodes the command as the audit system expects for
       untrusted strings. This function should be used by all apps need to
       record commands. The function parameters are as follows:

       audit_fd - The fd returned by audit_open
       type - type of message, ex: AUDIT_USYS_CONFIG, AUDIT_USER_LOGIN
       command - the command being logged
       tty - The tty of the user, if NULL will attempt to figure out
       result - 1 is "success" and 0 is "failed"


RETURN VALUE
       It returns the sequence number which is > 0 on success or <= 0 on
       error.


ERRORS
       This function returns -1 on failure. Examine errno for more info.


SEE ALSO
       audit_log_user_message(3), audit_log_user_comm_message(3),
       audit_log_acct_message(3), audit_log_user_avc_message(3),
       audit_log_semanage_message(3).


AUTHOR
       Steve Grubb



Red Hat                            Feb 2007          AUDIT_LOG_USER_COMMAND(3)