__audit_log_end(9)

💫 __audit_log_end(9) — your fave kernel API manual, bestie edition ✨

okay so real talk, this page lives in the Kernel API Manual (that's the manual name, not just me being cute 🎀) and it's literally all about enqueueing one audit record. one. single. record. and honestly? she ate. 💅

---

🌸 NAME 🌸

__audit_log_end — enqueue one audit record. that's it, that's the whole vibe. no cap, it does exactly one thing and it does it iconically. 👑

---

✨ SYNOPSIS ✨

void __audit_log_end (struct sk_buff *skb );

the way that signature is just chef's kiss — returns void, takes a struct sk_buff * named skb. periodt. 🫶

---

🦋 ARGUMENTS 🦋

• skb — the buffer to send. that's the one. the whole entire errand. you hand her the buffer, she sends it. main character energy fr fr. 🔥

---

💜 SEE ALSO 💜

okay bestie, buckle up, because the cross-reference list on this page is long and we are NOT skipping a single one of them — every single one is getting its moment. 🌈 iykyk.

first, the kernel file they're all chillin' in: ./kernel/audit.c 📁

here's the full squad, in the exact order they showed up (bc i don't gatekeep and i don't reorder):

• struct audit_net(9)
• struct auditd_connection(9)
• struct audit_ctl_mutex(9)
• auditd_test_task(9)
• audit_ctl_lock(9)
• audit_ctl_unlock(9)
• audit_ctl_owner_current(9)
• auditd_pid_vnr(9)
• audit_cfg_lsm(9)
• audit_get_sk(9)
• audit_log_lost(9)
• auditd_conn_free(9)
• auditd_set(9)
• kauditd_printk_skb(9)
• kauditd_rehold_skb(9)
• kauditd_hold_skb(9)
• kauditd_retry_skb(9)
• auditd_reset(9)
• auditd_send_unicast_skb(9)
• kauditd_send_queue(9)
• kauditd_thread(9)
• audit_send_reply(9)
• audit_receive(9)
• audit_serial(9)
• audit_log_start(9)
• audit_expand(9)
• audit_log_format(9)
• audit_log_n_hex(9)
• audit_string_contains_control(9)
• audit_log_n_untrustedstring(9)
• audit_log_untrustedstring(9)
• audit_buffer_aux_new(9)
• audit_buffer_aux_end(9)
• audit_log_subj_ctx(9)
• audit_log_path_denied(9)
• audit_set_loginuid(9)
• audit_signal_info(9)
• audit_log_end(9)
• audit_log(9)

notice how audit_log_end(9) and audit_log(9) are right there at the end, no underscore prefix, just vibing. and our girl __audit_log_end with the double underscore got her own page. slay. 💖

---

lowkey a reminder bestie: this page gives you the name, the signature, the one argument, and the see-alsos. that's the whole tea. no extra lore, no surprises, don't go inventing behaviour that isn't written here. 🫶

---

🎀 sign-off 🎀

kisses from the ./kernel source, dated October 2026 — and that's the page, bestie! go forth and enqueue exactly one audit record. you're gonna do amazing. 💖✨🌸🦋💅🍓🧚⭐