Libaudit-Dev
- audit_add_rule_data(3) Add new audit rule
- audit_add_watch(3) create a rule layout for a watch
- audit_close(3) Close the audit netlink socket connection
- audit_delete_rule_data(3) Delete audit rule
- audit_detect_machine(3) Detects the current machine type
- audit_encode_nv_string(3) encode a name/value pair in a string
- audit_encode_value(3) encode input string to ASCII code string
- audit_flag_to_name(3) Convert the numeric rule-matching filter value to the rule-matching filter name
- audit_fstype_to_name(3) Convert the numeric fstype value to the fstype name
- audit_get_reply(3) Get the audit system's reply
- audit_get_session(3) Get a program's login session id value
- audit_getloginuid(3) Get a program's loginuid value
- audit_is_enabled(3) judge whether auditing is enabled or not
- audit_log_acct_message(3) log a user account message
- audit_log_semanage_message(3) log a semanage message
- audit_log_user_avc_message(3) log a user avc message
- audit_log_user_comm_message(3) log a user message from a console app
- audit_log_user_command(3) log a user command
- audit_log_user_message(3) log a general user message
- audit_name_to_action(3) Convert the action name to the numeric action value to each other
- audit_name_to_errno(3) Convert the errno name and the numeric errno value to each other
- audit_name_to_flag(3) Convert the rule-matching filter name to the numeric rule-matching filter value
- audit_name_to_fstype(3) Convert the fstype name to the numeric fstype value
- audit_name_to_syscall(3) Convert the syscall name to the numeric syscall value
- audit_open(3) Open a audit netlink socket connection
- audit_request_rules_list_data(3) Request list of current audit rules
- audit_request_signal_info(3) Request signal info for the audit system
- audit_request_status(3) Request status of the audit system
- audit_set_backlog_limit(3) Set the audit backlog limit
- audit_set_backlog_wait_time(3) Set the audit backlog wait time
- audit_set_enabled(3) Enable or disable auditing
- audit_set_failure(3) Set audit failure flag
- audit_set_pid(3) Set audit daemon process ID
- audit_set_rate_limit(3) Set audit rate limit
- audit_setloginuid(3) Set a program's loginuid value
- audit_syscall_to_name(3) Convert the numeric syscall value to the syscall name
- audit_update_watch_perms(3) update permissions field of watch command
- audit_value_needs_encoding(3) check a string to see if it needs encoding
- get_auditfail_action(3) Get failure_action tunable value
- set_aumessage_mode(3) Sets the message mode