centos man page for audit_alloc

AUDIT_ALLOC(9)							 Audit Interfaces						    AUDIT_ALLOC(9)

NAME
       audit_alloc - allocate an audit context block for a task

SYNOPSIS
       int audit_alloc(struct task_struct * tsk);

ARGUMENTS
       tsk
	   task

DESCRIPTION
       Filter on the task information and allocate a per-task audit context if necessary. Doing so turns on system call auditing for the specified
       task. This is called from copy_process, so no lock is needed.

COPYRIGHT
Kernel Hackers Manual 3.10					     June 2014							    AUDIT_ALLOC(9)