debian man page for audit_open

AUDIT_OPEN(3)							  Linux Audit API						     AUDIT_OPEN(3)

NAME
       audit_open - Open a audit netlink socket connection

SYNOPSIS
       #include <libaudit.h>

       int audit_open (void);

DESCRIPTION
       audit_open  creates  a  NETLINK_AUDIT socket for communication with the kernel part of the Linux Audit Subsystem. The audit system uses the
       ACK feature of netlink. This means that every message to the kernel will return a netlink status packet even if the operation succeeds.

RETURN VALUE
       Returns -1 if an error occurs; otherwise, the return value is a descriptor referencing the socket.

SEE ALSO
       netlink(7).

AUTHOR
       Steve Grubb

Red Hat 							     Oct 2006							     AUDIT_OPEN(3)