AUDIT\_LOG\_ACCT\_MESSAGE(3) Linux Audit API AUDIT\_LOG\_ACCT\_MESSAGE(3)

# [NAME](#NAME)

audit\_log\_acct\_message - log a user account message

# [SYNOPSIS](#SYNOPSIS)

```
#include <libaudit.h>
```

```
int audit_log_acct_message(int audit_fd,
                           int type,
                           const char *pgname,
                           const char *op,
                           const char *name,
                           unsigned int id,
                           const char *host,
                           const char *addr,
                           const char *tty,
                           int result);
```

# [DESCRIPTION](#DESCRIPTION)

This function will log a message to the audit system using a predefined message format. It should be used for all account manipulation operations. The function parameters are as follows:

[*audit\_fd* - The fd returned by audit\_open](#audit_fd)

[*type* - type of message: AUDIT\_USER\_CHAUTHTOK for changing any account attributes.](#type)

[*pgname* - program's name, if NULL will attempt to figure out](#pgname)

[op - operation. Ex: "adding-user", "changing-finger-info", "deleting-group". This value should have a dash or underscore between the words so that report parsers group them together.](#op)

[*name* - user's account or group name. If not available use NULL.](#name)

[id - uid or gid that the operation is being performed on. If the user is unknown, pass a -1 and fill in the name parameter. This is used only when user is NULL.](#id)

[*host* - The hostname if known. If not available pass a NULL.](#host)

[*addr* - The network address of the user. If not available pass a NULL.](#addr)

[tty - The tty of the user, if NULL will attempt to figure out](#tty)

[*result* - 1 is "success" and 0 is "failed"](#result)

# [RETURN VALUE](#RETURN_VALUE)

It returns the sequence number which is &gt; 0 on success or &lt;= 0 on error.

# [ERRORS](#ERRORS)

This function returns -1 on failure. Examine errno for more info.

# [SEE ALSO](#SEE_ALSO)

[**audit\_log\_user\_message**(3)](/man/os/audit/audit_log_user_message.3), [**audit\_log\_user\_comm\_message**(3)](/man/os/audit/audit_log_user_comm_message.3), [**audit\_log\_user\_avc\_message**(3)](/man/os/audit/audit_log_user_avc_message.3), [**audit\_log\_semanage\_message**(3)](/man/os/audit/audit_log_semanage_message.3).

# [AUTHOR](#AUTHOR)

Steve Grubb

Nov 2015 Red Hat

---

Document: audit_log_acct_message(3) from audit 4.2.1-r3 (Chainguard OS)
Source: https://github.com/linux-audit/audit-userspace