table of contents
other versions
| AUDIT_LOG_END(9) | Audit Interfaces | AUDIT_LOG_END(9) |
NAME¶
audit_log_end - end one audit record
SYNOPSIS¶
void audit_log_end(struct audit_buffer * ab);
ARGUMENTS¶
struct audit_buffer * ab
the audit_buffer
DESCRIPTION¶
We can not do a netlink send inside an irq context because it blocks (last arg, flags, is not set to MSG_DONTWAIT), so the audit buffer is placed on a queue and a tasklet is scheduled to remove them from the queue outside the irq context. May be called in any context.
COPYRIGHT¶
| June 2017 | Kernel Hackers Manual 4.11 |