AUDIT_ALLOC(9)                           Audit Interfaces                          AUDIT_ALLOC(9)



NAME
       audit_alloc - allocate an audit context block for a task

SYNOPSIS
       int audit_alloc(struct task_struct * tsk);

ARGUMENTS
       tsk
           task

DESCRIPTION
       Filter on the task information and allocate a per-task audit context if necessary. Doing
       so turns on system call auditing for the specified task. This is called from copy_process,
       so no lock is needed.

COPYRIGHT
Kernel Hackers Manual 4.8.                 January 2017                            AUDIT_ALLOC(9)