suse man page for audit_syscall_entry

Query: audit_syscall_entry

OS: suse

Section: 9

Format: Original Unix Latex Style Formatted with HTML and a Horizontal Scroll Bar

AUDIT_SYSCALL_ENTRY(9)						 Audit Interfaces					    AUDIT_SYSCALL_ENTRY(9)

NAME
audit_syscall_entry - fill in an audit record at syscall entry
SYNOPSIS
void audit_syscall_entry(int arch, int major, unsigned long a1, unsigned long a2, unsigned long a3, unsigned long a4);
ARGUMENTS
arch architecture type major major syscall type (function) a1 additional syscall register 1 a2 additional syscall register 2 a3 additional syscall register 3 a4 additional syscall register 4
DESCRIPTION
Fill in audit context at syscall entry. This only happens if the audit context was created when the task was created and the state or filters demand the audit context be built. If the state from the per-task filter or from the per-syscall filter is AUDIT_RECORD_CONTEXT, then the record will be written at syscall exit time (otherwise, it will only be written if another part of the kernel requests that it be written).
COPYRIGHT
Kernel Hackers Manual 2.6. July 2010 AUDIT_SYSCALL_ENTRY(9)
Related Man Pages
ausyscall(8) - centos
syscall(3ucb) - sunos
syscall(3ucb) - opensolaris
syscall(3ucb) - mojave
syscall(3ucb) - posix
Similar Topics in the Unix Linux Community
Migrating to UNIX
Tar Command
A (ksh) Library For and From UNIX.com
The Future of the PM (Private Message) System at UNIX.com
Shopt -s histappend