kauditd_printk_skb(9)

💅 kauditd_printk_skb(9) — like, the Kernel API Manual girlies know ✨

okay so bestie, real talk: this one lives in the Kernel API Manual section, and honestly? it's giving "last resort energy" and I'm obsessed. 🎀

---

🌸 NAME 🌸

kauditd_printk_skb — print the audit record to the ring buffer, no cap 💖

---

✨ SYNOPSIS ✨

void kauditd_printk_skb (struct sk_buff *skb );

like, that's the whole signature. she's short, she's sweet, she returns void because she's not about to give you feedback. 💀

---

🦋 ARGUMENTS 🦋

• skb — the audit record. that's it, that's the whole vibe. the packet in question. 🫶

---

🌈 DESCRIPTION 🌈

okay so picture this: for whatever reason — and the manpage is literally like "whatever the reason", iconic non-explanation honestly — this packet might not make it to the auditd connection. 😭 like it just... doesn't arrive. tragic.

so instead we write it out via printk so the information isn't completely lost. not me saving your audit data's whole life with a backup plan. 💅 the info stays, the delivery method is just different. main character energy for a fallback path, fr fr.

---

👑 SEE ALSO 👑

like the whole kernel ./kernel/audit.c friend group, honestly. say hi to:

struct audit_net(9), struct auditd_connection(9), struct audit_ctl_mutex(9), auditd_test_task(9), audit_ctl_lock(9), audit_ctl_unlock(9), audit_ctl_owner_current(9), auditd_pid_vnr(9), audit_cfg_lsm(9), audit_get_sk(9), audit_log_lost(9), auditd_conn_free(9), auditd_set(9), kauditd_rehold_skb(9), kauditd_hold_skb(9), kauditd_retry_skb(9), auditd_reset(9), auditd_send_unicast_skb(9), kauditd_send_queue(9), kauditd_thread(9), audit_send_reply(9), audit_receive(9), audit_serial(9), audit_log_start(9), audit_expand(9), audit_log_format(9), audit_log_n_hex(9), audit_string_contains_control(9), audit_log_n_untrustedstring(9), audit_log_untrustedstring(9), audit_buffer_aux_new(9), audit_buffer_aux_end(9), audit_log_subj_ctx(9), audit_log_path_denied(9), audit_set_loginuid(9), audit_signal_info(9), __audit_log_end(9), audit_log_end(9), audit_log(9)

that's the group chat. everyone's invited. 🫶✨

---

okay that's the whole page, bestie — mwah 💋

signed off from ./kernel, dated October 2026, and yes she ate 👑💅✨