AUDIT\_REQUEST\_STATUS(3) Linux Audit API AUDIT\_REQUEST\_STATUS(3)

# [NAME](#NAME)

audit\_request\_status - Request status of the audit system

# [SYNOPSIS](#SYNOPSIS)

```
#include <libaudit.h>
```

```
int audit_request_status(int fd);"
```

# [DESCRIPTION](#DESCRIPTION)

audit\_request\_status requests that the kernel send status structure describing various settings on the descriptor given in *fd*. The audit\_status structure is as follows:

```
struct audit_status {


   __u32   mask;           /* Bit mask for valid entries */


   __u32   enabled;        /* 1 = enabled, 0 = disabled */


   __u32   failure;        /* Failure-to-log action */


   __u32   pid;            /* pid of auditd process */


   __u32   rate_limit;     /* messages rate limit (per second) */


   __u32   backlog_limit;  /* waiting messages limit */


   __u32   lost;           /* messages lost */


   __u32   backlog;        /* messages waiting in queue */
};
```

# [RETURN VALUE](#RETURN_VALUE)

The return value is &lt;= 0 on error, otherwise it is the netlink sequence id number. This function can have any error that sendto would encounter.

# [SEE ALSO](#SEE_ALSO)

[**audit\_open**(3)](/man/os/audit/audit_open.3), [**audit\_get\_reply**(3)](/man/os/audit/audit_get_reply.3), [**auditd**(8)](/man/os/audit/auditd.8).

# [AUTHOR](#AUTHOR)

Steve Grubb

Oct 2006 Red Hat

---

Document: audit_request_status(3) from audit 4.2.1-r3 (Chainguard OS)
Source: https://github.com/linux-audit/audit-userspace