'\" t
.\"     Title: audit_alloc
.\"    Author: [FIXME: author] [see http://docbook.sf.net/el/author]
.\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/>
.\"      Date: April 2019
.\"    Manual: Audit Interfaces
.\"    Source: Kernel Hackers Manual 4.9.168
.\"  Language: English
.\"
.TH "AUDIT_ALLOC" "9" "April 2019" "Kernel Hackers Manual 4\&.9\&." "Audit Interfaces"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.\" http://bugs.debian.org/507673
.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\" -----------------------------------------------------------------
.\" * set default formatting
.\" -----------------------------------------------------------------
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
.\" -----------------------------------------------------------------
.\" * MAIN CONTENT STARTS HERE *
.\" -----------------------------------------------------------------
.SH "NAME"
audit_alloc \- allocate an audit context block for a task
.SH "SYNOPSIS"
.HP \w'int\ audit_alloc('u
.BI "int audit_alloc(struct\ task_struct\ *\ " "tsk" ");"
.SH "ARGUMENTS"
.PP
\fItsk\fR
.RS 4
task
.RE
.SH "DESCRIPTION"
.PP
Filter on the task information and allocate a per\-task audit context if necessary\&. Doing so turns on system call auditing for the specified task\&. This is called from copy_process, so no lock is needed\&.
.SH "COPYRIGHT"
.br