Appends event information to the current audit event buffer.
#include <sys/types.h> #include <sys/errno.h> int audit_svcbcopy ( buf, len) char *buf; int len;
| Item | Description |
|---|---|
| buf | Specifies the information to append to the current audit event record buffer. |
| len | Specifies the number of bytes in the buffer. |
The audit_svcbcopy kernel service appends the specified buffer to the event-specific information for the current switched virtual circuit (SVC). System calls should initialize auditing with the audit_svcstart kernel service, which creates a record buffer for the named event.
The audit_svcbcopy kernel service can then be used to add additional information to that buffer. This information usually consists of system call parameters passed by reference.
If auditing is enabled, the information is written by the audit_svcfinis kernel service after the record buffer is complete.
The audit_svcbcopy kernel service can be called from the process environment only.
| Item | Description |
|---|---|
| 0 | Indicates a successful operation. |
| ENOMEM | Indicates that the kernel service is unable to allocate space for the new buffer. |