AUDIT_RECEIVE_FILTER(9) Audit Interfaces AUDIT_RECEIVE_FILTER(9)NAMEaudit_receive_filter - apply all rules to the specified message type
SYNOPSIS
int audit_receive_filter(int type, int pid, int seq, void * data,
size_t datasz, kuid_t loginuid, u32 sessionid,
u32 sid);
ARGUMENTS
type
audit message type
pid
target pid for netlink audit messages
seq
netlink audit message sequence (serial) number
data
payload data
datasz
size of payload data
loginuid
loginuid of sender
sessionid
sessionid for netlink audit message
sid
SE Linux Security ID of sender
COPYRIGHTKernel Hackers Manual 3.8. June 2014 AUDIT_RECEIVE_FILTER(9)