AUDIT_CLOSE(3) Linux Audit API AUDIT_CLOSE(3)

audit_close - Close the audit netlink socket connection

#include <libaudit.h>
void audit_close(int fd);

audit_close() closes the NETLINK_AUDIT socket that communicates with the kernel part of the Linux Audit Subsystem. fd must have been returned by audit_open(3).

None.

audit_open(3), netlink(7).

Steve Grubb

Apr 2021 Red Hat