// gcc -Wall -O2 audit.c -laudit #include #include #include #include void err(const char* str) { fprintf(stderr, "%s\n", str); exit(1); } int main() { int audit_fd, rc; audit_fd = audit_open(); if (audit_fd < 0) err("audit_open"); rc = audit_log_acct_message (audit_fd, AUDIT_USER_CHAUTHTOK, NULL, "test:message", "?", -1, "localhost", NULL, "/dev/pts/2", 1); if (rc < 0) err("audit_log_acct_message"); audit_close(audit_fd); return 0; }