AUDIT\_LOG\_USER\_AVC\_MESSAGE(3) Linux Audit API AUDIT\_LOG\_USER\_AVC\_MESSAGE(3)

# [NAME](#NAME)

audit\_log\_user\_avc\_message - log a user avc message

# [SYNOPSIS](#SYNOPSIS)

**#include <libaudit.h>**

**int audit\_log\_user\_avc\_message(intaudit\_fd,int"type,constchar\*"message,constchar\*"hostname,constchar\*"addr,constchar\*"tty,uid\_t"auid);"**

# [DESCRIPTION](#DESCRIPTION)

This function will log a message to the audit system using a predefined message format. This function should be used by all apps that are SE Linux object managers. The function parameters are as follows:

```
audit_fd - The fd returned by audit_open
type - type of message, ex: AUDIT_USER_AVC
message - the message being sent
hostname - the hostname if known
addr - The network address of the user
tty - The tty of the user, if NULL will attempt to figure out
auid - The auid of the person related to the avc message
```

These values should correspond to who the message is about.

# [RETURN VALUE](#RETURN_VALUE)

It returns the sequence number which is > 0 on success or <= 0 on error.

# [ERRORS](#ERRORS)

This function returns -1 on failure. Examine errno for more info.

# [SEE ALSO](#SEE_ALSO)

[**audit\_log\_user\_message**(3)](/man/os/audit/audit_log_user_message.3), [**audit\_log\_acct\_message**(3)](/man/os/audit/audit_log_acct_message.3), [**audit\_log\_user\_comm\_message**(3)](/man/os/audit/audit_log_user_comm_message.3), [**audit\_log\_semanage\_message**(3)](/man/os/audit/audit_log_semanage_message.3).

# [AUTHOR](#AUTHOR)

Steve Grubb

Oct 2006 Red Hat

---

Document: audit_log_user_avc_message(3) from audit 4.2.1-r1 (Chainguard OS)
Source: https://github.com/linux-audit/audit-userspace