getevent.2 (2010 09)

getevent(2) getevent(2)

(TO BE OBSOLETED)

NAME

getevent() - get events and system calls that are currently being audited

SYNOPSIS

#include <sys/audit.h>

int getevent(

struct aud_type *a_syscall,

struct aud_event_tbl *a_event

);

Remarks

This function is provided purely for backward compatibility. HP recommends that new applications use

the audevent command to get events and system calls that are currently being audited. See

audevent (1M).

DESCRIPTION

getevent() gets the events and system calls being audited. The events are returned in a table pointed

to by a_event . The system calls are returned in a table pointed to by a_syscall . This call is restricted to

users with the

AUDCONTROL privilege.

Security Restrictions

Some or all of the actions associated with this system call require the

AUDCONTROL privilege. Processes

owned by the superuser have this privilege. Processes owned by other users may have this privilege,

depending on system conﬁguration. See privileges (5) for more information about privileged access on sys-

tems that support ﬁne-grained privileges.

RETURN VALUE

Upon successful completion, a value of 0 is returned; otherwise, a −1 is returned and

errno is set to indi-

cate the error.

ERRORS

getevent() fails if the following is true:

[EPERM] The caller does not have the

AUDCONTROL privilege.

AUTHOR

getevent() was developed by HP.

PAGE 1
getevent(2) getevent(2) (TO BE OBSOLETED) NAME getevent() - get events and system calls that are currently being audited SYNOPSIS #include int getevent( struct aud_type *a_syscall, struct aud_event_tbl *a_event ); Remarks This function is provided purely for backward compatibility. HP recommends that new applications use the audevent command to get events and system calls that are currently being audited. See audevent (1M).
PAGE 2
(Notes) A (Notes) gA 2 Hewlett-Packard Company −1− HP-UX 11i Version 3: September 2010