__AUDIT_SYSCALL_EXIT(9) Audit Interfaces __AUDIT_SYSCALL_EXIT(9)NAME__audit_syscall_exit - deallocate audit context after a system call
SYNOPSIS
void __audit_syscall_exit(int success, long return_code);
ARGUMENTS
success
-- undescribed --
return_code
-- undescribed --
DESCRIPTION
Tear down after system call. If the audit context has been marked as
auditable (either because of the AUDIT_RECORD_CONTEXT state from
filtering, or because some other part of the kernel write an audit
message), then write out the syscall information. In call cases, free
the names stored from getname.
COPYRIGHTKernel Hackers Manual 2.6. November 2013 __AUDIT_SYSCALL_EXIT(9)