AUDIT\_REQUEST\_FEATURES(3) Linux Audit API AUDIT\_REQUEST\_FEATURES(3)

# [NAME](#NAME)

audit\_request\_features - request audit feature bitmap

# [SYNOPSIS](#SYNOPSIS)

**#include <libaudit.h>**

**int audit\_request\_features(int fd);**

# [DESCRIPTION](#DESCRIPTION)

**audit\_request\_features**() requests that the kernel send a structure describing supported audit features on *fd* which must be an open audit netlink socket.

# [RETURN VALUE](#RETURN_VALUE)

The return value is <= 0 on error, otherwise it is the netlink sequence id number. This function can have any error that [**sendto**(2)](/man/os/audit/sendto.2) would encounter.

# [SEE ALSO](#SEE_ALSO)

[**audit\_get\_features**(3)](/man/os/audit/audit_get_features.3), [**audit\_open**(3)](/man/os/audit/audit_open.3), [**auditd**(8)](/man/os/audit/auditd.8).

# [AUTHOR](#AUTHOR)

Steve Grubb

July 2025 Red Hat

---

Document: audit_request_features(3) from audit 4.2.1-r2 (Chainguard OS)
Source: https://github.com/linux-audit/audit-userspace