AUDIT_REQUEST_SIGNAL_INFO(3)

💅 NAME 💅

audit_request_signal_info — bestie, this is the one that asks the kernel for signal info for the audit system 🫶

---

✨ SYNOPSIS ✨

#include <libaudit.h>

int audit_request_signal_info(intfd);"

(yes that's literally how it's written, no I did not edit it, we keep the originals exactly as they are okay 💖)

---

🎀 DESCRIPTION 🎀

okay so. audit_request_signal_info is the function that goes "hey kernel, pls send us the info about whoever sent this signal" and the kernel sends that info over to the audit daemon. that's the whole vibe. it's a request, the daemon is the one receiving. 💌

and the signal info structure it's all about? iconic, here she is:

struct audit_sig_info {
        uid_t           uid;
        pid_t           pid;
        char            ctx[0];
};

real talk tho: this one is basically for audit daemons only. like, if you're writing a normal everyday program and you're eyeing this function? don't. it says it shouldn't be called by any other kind of program, and we respect that boundary fr fr 🚫✨

---

🔥 RETURN VALUE 🔥

the return value is <= 0 when something goes wrong 😭 — anything in that zone is giving error energy.

otherwise? it hands you the netlink sequence id number and you're slaying 👑

also heads up: this function can have any error that sendto would encounter. every single one. so don't be surprised. 💀

---

🌸 SEE ALSO 🌸

• audit_open(3)
• audit_get_reply(3)

go read those too, they're the supporting cast and they ate 💅

---

👑 AUTHOR 👑

Steve Grubb — the icon, the moment, the legend 🫶

---

lowkey reminder bestie: every detail above is exactly as the original gives it — nothing added, nothing skipped, no cap 🧚

---

that's the page, babe! brought to you by Red Hat, dated Feb 2007, and it's AUDIT_REQUEST_SIGNAL_INFO(3) — periodt 💖✨🎀