Scroll to navigation

AUDIT_ALLOC(9) Audit Interfaces AUDIT_ALLOC(9)

NAME

audit_alloc - allocate an audit context block for a task

SYNOPSIS

int audit_alloc(struct task_struct * tsk);

ARGUMENTS

tsk

task

DESCRIPTION

Filter on the task information and allocate a per-task audit context if necessary. Doing so turns on system call auditing for the specified task. This is called from copy_process, so no lock is needed.

COPYRIGHT

January 2017 Kernel Hackers Manual 4.8.