iOS Manual Pages

This document is a Mac OS X manual page. Manual pages are a command-line technology for providing documentation. You can view these manual pages locally using the man(1) command. These manual pages come from many different sources, and thus, have a variety of writing styles.

For more information about the manual page format, see the manual page for manpages(5).

AUDIT(2)                    BSD System Calls Manual                   AUDIT(2)

NAME
     audit -- submit a record to the kernel for auditing

SYNOPSIS
     #include <bsm/audit.h>

     int
     audit(const void * record, int length);

DESCRIPTION
     The audit() function submits a record to the kernel for inclusion in the
     global audit trail. The record must already be in BSM format. To protect
     the integrity of the audit trail, this system call must be made with suf-ficient sufficient
     ficient privileges.  Libbsm can be used to create and manipulate BSM
     data.  Length is the length in bytes of the BSM record and record points
     to the data.

RETURN VALUES
     Upon successful completion a value of 0 is returned.  Otherwise, a value
     of -1 is returned and errno is set to indicate the error.

ERRORS
     The audit() system call will fail if:

     [EINVAL]           Length is greater than MAX_AUDIT_RECORD_SIZE, less
                        than zero, greater than the internal buffer size, or
                        the record fails verification.

     [ENOTSUP]          The security auditing service is not available.

     [EPERM]            The call was made with insufficient privileges to com-plete. complete.
                        plete.

SEE ALSO
     auditon(2), auditctl(2), getauid(2), setauid(2), getaudit(2), setaudit(2)

HISTORY
     The audit() function call first appeared in Mac OS X 10.3 (Panther).

Darwin                           July 30, 2007                          Darwin