audit_log_format(9)

💅 audit_log_format(9) — like, the whole Kernel API Manual vibe 🎀

okay so bestie, welcome to the kernel API manual, this one's audit_log_format(9) and honestly it's giving "small function, big friend group" energy. it's literally a kernel thing, October 2026 core, filed under ./kernel. let's get into it 🦋

---

✨ NAME ✨

audit_log_format — it formats a message into the audit buffer. that's it, that's the whole job. no cap 💅

---

🌸 SYNOPSIS 🌸

void audit_log_format (struct audit_buffer *ab , const char *fmt , ... );

look at her go. void return, so she's not giving you anything back — she's just doing the work and moving on 👑

---

🫶 ARGUMENTS 🫶

• ab — an audit_buffer. that's your buffer, your little audit crib where the formatted message is gonna live 🏠
• fmt — the format string. the blueprint. the vision board for how the message should look ✨
• ... — optional parameters matching the fmt string. yes queen, variadic, she takes as many as she needs 🍓

---

💖 DESCRIPTION 💖

so here's the tea: all the work is done in audit_log_vformat. literally all of it. this function is basically the cute front-facing one who introduces you to the one doing the actual labour 😭 iconic delegation honestly 🌈

ngl, that's the entire description. the manpage said what it said and dipped 💀

---

🔥 SEE ALSO 🔥

bestie, brace yourself, the friend group is HUGE. they all live in the kernel file ./kernel/audit.c:

• struct audit_net(9)
• struct auditd_connection(9)
• struct audit_ctl_mutex(9)
• auditd_test_task(9)
• audit_ctl_lock(9)
• audit_ctl_unlock(9)
• audit_ctl_owner_current(9)
• auditd_pid_vnr(9)
• audit_cfg_lsm(9)
• audit_get_sk(9)
• audit_log_lost(9)
• auditd_conn_free(9)
• auditd_set(9)
• kauditd_printk_skb(9)
• kauditd_rehold_skb(9)
• kauditd_hold_skb(9)
• kauditd_retry_skb(9)
• auditd_reset(9)
• auditd_send_unicast_skb(9)
• kauditd_send_queue(9)
• kauditd_thread(9)
• audit_send_reply(9)
• audit_receive(9)
• audit_serial(9)
• audit_log_start(9)
• audit_expand(9)
• audit_log_n_hex(9)
• audit_string_contains_control(9)
• audit_log_n_untrustedstring(9)
• audit_log_untrustedstring(9)
• audit_buffer_aux_new(9)
• audit_buffer_aux_end(9)
• audit_log_subj_ctx(9)
• audit_log_path_denied(9)
• audit_set_loginuid(9)
• audit_signal_info(9)
• __audit_log_end(9)
• audit_log_end(9)
• audit_log(9)

no seriously, that's the whole list, i counted, don't make me recount 💀 but like... go read them, they're all slaying in their own way 🧚

---

mwah 💜 that's the page! source: ./kernel, dated October 2026, and it's audit_log_format(9) all the way down. go format some messages bestie, you got this 🎀✨