DOKK / manpages / debian 10 / libaudit-dev / audit_update_watch_perms.3.en
AUDIT_UPDATE_WATCH_PERMS(3) Linux Audit API AUDIT_UPDATE_WATCH_PERMS(3)

audit_update_watch_perms - update permissions field of watch command

#include <libaudit.h>

int audit_update_watch_perms(struct audit_rule_data *rule, int perms);

audit_update_watch_perms adds the permission checks to a watch command that is being built. The perms are a bitwise or'ing of: AUDIT_PERM_EXEC, AUDIT_PERM_WRITE, AUDIT_PERM_READ, AUDIT_PERM_ATTR.

Returns a number < 0 if an error occurs; otherwise, 0 for success.

audit_add_rule_data(3), audit_add_watch(3).

Steve Grubb

Feb 2007 Red Hat