NAME
getevent() — get events and system calls that are currently being audited
SYNOPSIS
#include <sys/audit.h>
int getevent(
struct aud_type *a_syscall,
struct aud_event_tbl *a_event
);
Remarks
This function is provided purely for backward compatibility.
HP recommends that new applications use
the
audevent
command
to get events and system calls that are currently being audited.
See
audevent(1M).
DESCRIPTION
getevent()
gets the events and system calls being audited.
The events are returned in a table pointed to by
a_event.
The system calls are returned in a table pointed to by
a_syscall.
This call is restricted to users with the
AUDCONTROL
privilege.
Security Restrictions
Some or all of the actions associated with this system call require the
AUDCONTROL
privilege.
Processes owned by the superuser have this privilege.
Processes owned by other users may have this privilege, depending on system
configuration.
See
privileges(5)
for more information about privileged access on
systems that support fine-grained privileges.
RETURN VALUE
Upon successful completion, a value of 0 is returned;
otherwise, a -1 is returned and
errno
is set to indicate the error.
ERRORS
getevent()
fails if the following is true:
- EPERM
The caller does not have the
AUDCONTROL
privilege.
AUTHOR
getevent()
was developed by HP.
Printable version
