NAME
setevent() — set current events and system calls which are to be audited
SYNOPSIS
#include <sys/audit.h>
int setevent(
const struct aud_type a_syscall[],
const struct aud_event_tbl a_event[]
);
Remarks
This function is provided purely for backward compatibility.
HP recommends that new applications use
the
audevent
command
to get events and system calls that are currently being audited.
See
audevent(1M).
DESCRIPTION
setevent()
sets the events and system calls to be audited.
The event and system call settings in the tables pointed to by
a_syscall
and
a_event
become the current settings.
This call is restricted to the users with the
AUDCONTROL
privilege.
Security Restrictions
Some or all of the actions associated with this system call require the
AUDCONTROL
privilege.
Processes owned by the superuser have this privilege.
Processes owned by other users may have this privilege, depending on system
configuration.
See
privileges(5)
for more information about privileged access on systems that support
fine-grained privileges.
RETURN VALUE
Upon successful completion,
setevent()
returns 0; otherwise, it returns -1 and sets
errno
to indicate the error.
ERRORS
setevent()
fails if the following condition is encountered:
- EPERM
The caller is not a user with the
AUDCONTROL
privilege.
AUTHOR
setevent()
was developed by HP.