AUDIT_REQUES...LES_LIST_DATA(3)

✨ AUDIT_REQUES...LES_LIST_DATA(3) ✨

okay bestie, welcome to the Linux Audit API corner of the manual, section 3 (that's library functions, iykyk) 🎀 this one's short and sweet and honestly iconic for it.

---

💖 NAME 💖

audit_request_rules_list_data — ask for the list of current audit rules, pls and thank u 🫶

---

🌸 SYNOPSIS 🌸

#include <libaudit.h>

int audit_request_rules_list_data(intfd);"

(yeah the stray " at the end is literally just there, we don't ask questions, we copy exactly 💅)

---

🦋 DESCRIPTION 🦋

so audit_request_rules_list_data sends a request to the kernel asking it to list the current audit rules. that's the whole job. main character behaviour, no notes.

and then — after you've issued this request — the rules come back one after another. not all at once. one. after. another. so be ready to catch them, bestie 🙈

---

🔥 RETURN VALUE 🔥

the return value is <= 0 on error. otherwise? it's the netlink sequence id number. slay ✨

also heads up: this function can have any error that sendto would encounter. literally any of them. so don't come for it when it throws something weird, that's just the vibe.

---

⭐ SEE ALSO ⭐

• audit_add_rule_data(3)
• audit_delete_rule_data(3)
• audit_open(3)
• auditctl(8)

---

👑 AUTHOR 👑

Steve Grubb 🫡

---

sign-off time 💜 this lil page came from Red Hat, dated Oct 2006 — an absolute vintage baddie — and it lives at AUDIT_REQUES...LES_LIST_DATA(3). periodt. 💅✨