audit_add_rule_data (3) Linux Manual Page
NAME audit_add_rule_data – Add new audit rule SYNOPSIS #include <libaudit.h> int audit_add_rule_data (int fd, struct audit_rule_data *rule, int flags, int action); DESCRIPTION audit_add_rule adds an audit rule previously constructed with audit_rule_fieldpair_data(3) to one of several kernel event filters. The filter is specified by the flags argument. Possible values for flags are: • AUDIT_FILTER_USER – Apply…
