AUPARSE_NEW_BUFFER(3) | Linux Audit API | AUPARSE_NEW_BUFFER(3) |
auparse_new_buffer - replace the buffer in the parser
#include <auparse.h>
int auparse_new_buffer(auparse_state_t *au, const char *data, size_t data_len);
auparse_new_buffer replaces the data that the parser works on. auparse_init() must have been called with a source type of AUSOURCE_BUFFER.
Returns 1 if an error occurs; otherwise, 0 for success.
Feb 2021 | Red Hat |