audit_log_n_hex(9)

💜 audit_log_n_hex(9) — the Kernel API Manual glow-up ✨

okay bestie, so this is audit_log_n_hex(9) from the Kernel API Manual, and honestly? she's a little workhorse and she deserves her flowers 🌸

---

✨ NAME ✨

audit_log_n_hex — literally takes a buffer, turns it into hex, and appends it to the audit skb. that's the whole vibe 🎀

---

🌈 SYNOPSIS 🌈

void audit_log_n_hex (struct audit_buffer *ab , const unsigned char *buf
, size_t len );

no cap, that's the exact signature — copy it, don't freestyle it 💅

---

🦋 ARGUMENTS 🦋

• ab — the audit_buffer, aka the main character we're appending into 👑
• buf — the buffer we're converting to hex, the raw material fr fr
• len — how much of buf we're converting, length queen, respect her 🫶

---

💖 DESCRIPTION 💖

okay so first thing: there is no return value. none. zero. void. and if the expand fails? it's silently ignored — like, it does not tell you, it does not warn you, it just moves on 😭 that's the documented behaviour, ngl, so don't come for me.

what she actually does: takes the buf you handed her and converts it into a string of ascii hex digits ✨ then that new string gets placed onto the skb. iconic behaviour, no notes.

---

🌟 SEE ALSO 🌟

Kernel file ./kernel/audit.c, plus the whole audit-verse cast, and yes we're listing every single one because nobody gets left out of the group chat 💜:

• struct audit_net(9)
• struct auditd_connection(9)
• struct audit_ctl_mutex(9)
• auditd_test_task(9)
• audit_ctl_lock(9)
• audit_ctl_unlock(9)
• audit_ctl_owner_current(9)
• auditd_pid_vnr(9)
• audit_cfg_lsm(9)
• audit_get_sk(9)
• audit_log_lost(9)
• auditd_conn_free(9)
• auditd_set(9)
• kauditd_printk_skb(9)
• kauditd_rehold_skb(9)
• kauditd_hold_skb(9)
• kauditd_retry_skb(9)
• auditd_reset(9)
• auditd_send_unicast_skb(9)
• kauditd_send_queue(9)
• kauditd_thread(9)
• audit_send_reply(9)
• audit_receive(9)
• audit_serial(9)
• audit_log_start(9)
• audit_expand(9)
• audit_log_format(9)
• audit_string_contains_control(9)
• audit_log_n_untrustedstring(9)
• audit_log_untrustedstring(9)
• audit_buffer_aux_new(9)
• audit_buffer_aux_end(9)
• audit_log_subj_ctx(9)
• audit_log_path_denied(9)
• audit_set_loginuid(9)
• audit_signal_info(9)
• __audit_log_end(9)
• audit_log_end(9)
• audit_log(9)

---

and that's the page, bestie 💅 this one ships from the ./kernel directory, Kernel API Manual, dated October 2026 — mwah, go convert some hex, slay ✨🦋🎀