aa_audit_msg(9)

aa_audit_msg(9) 💅

okay so bestie, this is the Kernel API Manual page for aa_audit_msg, and it is literally about logging a message to the audit subsystem. Let’s get into it 🫶✨

🌸 NAME 🌸

aa_audit_msg — Log a message to the audit subsystem. That’s the whole vibe, no cap. 💖

✨ SYNOPSIS ✨

void aa_audit_msg (int type , struct apparmor_audit_data *ad , void
       (*cb) (struct audit_buffer *, void *) );

🎀 ARGUMENTS 🎀

• type — the audit type for the message. It’s giving “what kind of audit message is this” energy ✨
• ad — the audit event structure, and bestie it is NOT NULL. Do not come in here with a null, fr fr 😭
• cb — optional callback fn for type specific fields, and it is MAYBE NULL. So yes, it can be skipped, okay? 🦋

🦋 SEE ALSO 🦋

• Kernel file ./security/apparmor/audit.c — yes, that exact path, go peek at it 👀
• audit_pre(9) — another manpage bestie in the lineup 🎀
• aa_audit(9) — and this one too, iykyk 💅

🫶 cute little sign-off: this page comes from ./security/apparmor, and it’s dated October 2026. That’s the source/version and date, bestie — periodt. Stay audit-y! 💜🌈