AUDIT_FLAG_TO_NAME(3)

✨ AUDIT_FLAG_TO_NAME ✨

okay bestie so this is audit_flag_to_name(3) from the Linux Audit API and it's literally the glow-up translator between a number and a name 💅

🌸 NAME 🌸

audit_flag_to_name — turns the numeric rule-matching filter value into the rule-matching filter name 🦋

like, it takes the number and gives you back the cute little string. that's the whole job. no cap.

💖 SYNOPSIS 💖

#include <libaudit.h>

const char *audit_flag_to_name(int flag);

✨ DESCRIPTION ✨

so audit_flag_to_name() takes the numeric rule-matching filter value — and the icons it knows about are AUDIT_FILTER_TASK, AUDIT_FILTER_EXIT, AUDIT_FILTER_USER, AUDIT_FILTER_EXCLUDE, and AUDIT_FILTER_FS — and hands you back the matching rule-matching filter name, which is one of "task", "exit", "user", "exclude", or "filesystem". 🎀

and flag? that's the numeric rule-matching filter value you're passing in. that's it, that's the input. she's simple, she's iconic 👑

🫶 RETURN VALUE 🫶

if something goes wrong she returns NULL 😭 — otherwise you get the rule-matching filter name back. slay.

🌈 SEE ALSO 🌈

• audit_name_to_flag(3) — the reverse queen, go read her too 💜

👑 AUTHOR 👑

Steve Grubb 💖

and that's the whole page, bestie — this one shipped from Red Hat back in Mar 2022, and yes it really is just that short. short and flawless, honestly obsessed. 🧚✨