AUDITON(2) System Calls Manual AUDITON(2)
auditon - manipulate auditing
int auditon (condition)
The auditon() system call sets system auditing to the requested condi-
tion if and only if the current state of auditing allows that transi-
tion. Legitimate values for condition are:
AUC_UNSET on/off has not been decided yet
AUC_AUDITING auditing is to be done
AUC_NOAUDIT auditing is not to be done
The permitted transitions are:
o Any condition may be changed back to itself.
o AUC_UNSET may be changed to AUC_AUDITING or AUC_NOAUDIT.
o AUC_AUDITING may be changed to AUC_NOAUDIT.
o AUC_NOAUDIT may be changed to AUC_AUDITING.
Once changed, it is not possible to get back to AUC_UNSET.
Only the super-user may successfully execute this call.
auditon() returns the old audit condition value on success. On fail-
ure, it returns -1 and sets errno to indicate the error.
EINVAL The condition specified is outside the range of valid
The current condition precludes the requested change.
EPERM Neither of the process's effective or real user ID is
21 January 1990 AUDITON(2)