audit_return_fixup(9)

📦 version 7.3.1, in nixpkgs unstable

💅 audit_return_fixup(9)

okay so bestie, welcome to the Kernel API Manual page for audit_return_fixup(9) — yes the (9) means it's a kernel-level function, we're in the deep end now and honestly? iconic of you for showing up 🫶

✨ NAME ✨

audit_return_fixup — literally just here to fixup the return codes in the audit_context 🎀

🌸 SYNOPSIS 🌸

void audit_return_fixup (struct audit_context *ctx , int success , long
code );

no cap, that's the whole signature. void return, so it gives you nothing back — it's giving generous, selfless, main character energy ✨

🦋 ARGUMENTS 🦋

  • ctx — the audit_context. yes. that's the whole description. it's the audit context, bestie, it's right there in the name 💀
  • success — a true/false value that tells us whether the operation succeeded or not. simple as that 🍓
  • code — the operation return code. the actual number. the receipts, if you will 👑

💜 DESCRIPTION 💜

okay so here's the vibe check: we need to fixup the return code in the audit logs if the actual return codes are later going to be fixed by the arch specific signal handlers.

that's the whole reason this function exists. the audit log needs its numbers to line up with what the arch specific signal handlers are gonna do to the real return codes later, so we fixup the audit log's copy now. lowkey important, highkey underrated 💅 no extra steps, no extra lore, that's genuinely it.

🔥 SEE ALSO 🔥

Kernel file ./kernel/auditsc.c — and the whole friend group came through, fr fr:

like… the whole audit squad. go read them, iykyk 🌈

and that's the page!! 🧚 mwah 💖

this lil masterpiece lives in ./kernel, dated October 2026, and it's filed under audit_return_fixup(9) in case you need to find it again. slay, go fixup those return codes bestie 👑💅

📦 where this page comes from