<?xml version="1.0" encoding="ANSI_X3.4-1968" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=ANSI_X3.4-1968" /><title>audit_receive_filter</title><meta name="generator" content="DocBook XSL Stylesheets V1.75.2" /><link rel="home" href="index.html" title="The Linux Kernel API" /><link rel="up" href="ch12.html" title="Chapter 12. Audit Interfaces" /><link rel="prev" href="re490.html" title="audit_core_dumps" /><link rel="next" href="ch13.html" title="Chapter 13. Accounting Framework" /></head><body><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center"><span>audit_receive_filter</span></th></tr><tr><td width="20%" align="left"><a accesskey="p" href="re490.html">Prev</a> </td><th width="60%" align="center">Chapter 12. Audit Interfaces</th><td width="20%" align="right"> <a accesskey="n" href="ch13.html">Next</a></td></tr></table><hr /></div><div class="refentry" title="audit_receive_filter"><a id="API-audit-receive-filter"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>audit_receive_filter —
apply all rules to the specified message type
</p></div><div class="refsynopsisdiv" title="Synopsis"><h2>Synopsis</h2><div class="funcsynopsis"><table border="0" summary="Function synopsis" cellspacing="0" cellpadding="0" class="funcprototype-table"><tr><td><code class="funcdef">int <b class="fsfunc">audit_receive_filter </b>(</code></td><td>int <var class="pdparam">type</var>, </td></tr><tr><td> </td><td>int <var class="pdparam">pid</var>, </td></tr><tr><td> </td><td>int <var class="pdparam">uid</var>, </td></tr><tr><td> </td><td>int <var class="pdparam">seq</var>, </td></tr><tr><td> </td><td>void * <var class="pdparam">data</var>, </td></tr><tr><td> </td><td>size_t <var class="pdparam">datasz</var>, </td></tr><tr><td> </td><td>uid_t <var class="pdparam">loginuid</var>, </td></tr><tr><td> </td><td>u32 <var class="pdparam">sessionid</var>, </td></tr><tr><td> </td><td>u32 <var class="pdparam">sid</var><code>)</code>;</td></tr></table><div class="funcprototype-spacer"> </div></div></div><div class="refsect1" title="Arguments"><a id="id3025897"></a><h2>Arguments</h2><div class="variablelist"><dl><dt><span class="term"><em class="parameter"><code>type</code></em></span></dt><dd><p>
audit message type
</p></dd><dt><span class="term"><em class="parameter"><code>pid</code></em></span></dt><dd><p>
target pid for netlink audit messages
</p></dd><dt><span class="term"><em class="parameter"><code>uid</code></em></span></dt><dd><p>
target uid for netlink audit messages
</p></dd><dt><span class="term"><em class="parameter"><code>seq</code></em></span></dt><dd><p>
netlink audit message sequence (serial) number
</p></dd><dt><span class="term"><em class="parameter"><code>data</code></em></span></dt><dd><p>
payload data
</p></dd><dt><span class="term"><em class="parameter"><code>datasz</code></em></span></dt><dd><p>
size of payload data
</p></dd><dt><span class="term"><em class="parameter"><code>loginuid</code></em></span></dt><dd><p>
loginuid of sender
</p></dd><dt><span class="term"><em class="parameter"><code>sessionid</code></em></span></dt><dd><p>
sessionid for netlink audit message
</p></dd><dt><span class="term"><em class="parameter"><code>sid</code></em></span></dt><dd><p>
SE Linux Security ID of sender
</p></dd></dl></div></div></div><div class="navfooter"><hr /><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="re490.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="ch12.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="ch13.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top"><span>audit_core_dumps</span> </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 13. Accounting Framework</td></tr></table></div></body></html>
