AUDIT_ADD_WATCH(3)

💖 AUDIT_ADD_WATCH(3) 💖

okay bestie, welcome to the Linux Audit API section 3 page for audit_add_watch — yes that's the manual name, we're keeping it, it's iconic.

---

✨ NAME ✨

audit_add_watch — create a rule layout for a watch 🎀

---

🦋 SYNOPSIS 🦋

#include <libaudit.h>

int audit_add_watch(struct audit_rule_data **rulep, const char *path);"

---

🌸 DESCRIPTION 🌸

so audit_add_watch will create a watch rule inside the pointer to a pointer, rulep. literally all you have to hand it is the full path to a file, and it'll go ahead and initialize the audit_rule_data structure for a watch. that's it. that's the whole vibe. no cap. 💅

---

👑 RETURN VALUE 👑

• Returns -1 if an error occurs 😭
• otherwise, 0 for success ✨

---

🔥 SEE ALSO 🔥

• audit_add_rule_data(3)
• audit_delete_rule_data(3)

---

💜 AUTHOR 💜

Steve Grubb

---

and that's a wrap, bestie 🫶 this one came from Red Hat back in Feb 2007 — yes she's an elder icon and she still ate. periodt. 💅🌸