secpolev_init()

Initiate event monitoring

Synopsis:

#include <secpol/secpolev.h>
int secpolev_init(unsigned flags,
                  unsigned buffer_count,
                  unsigned flush_interval)

Arguments:

flags
Must be zero (there are currently no flags defined).
buffer_count
The number of 16k kernel event buffers to allocate (minimum is 2).
flush_interval
The time in milliseconds after which trace buffers are flushed (trace events may be delayed by up to this amount of time). If 0, then no automatic flushing is performed.

Library:

libsecpolev

Description:

The secpolev_init() function initializes the secpolev library and enables event collection.

Returns:

0 if successful, or -1 if an error occurred. On failure, errno is set to:
  • EINVAL - The buffer_count parameter is less than 2, or flags is non-zero.
  • EBUSY - Trace system is busy.
  • EAGAIN - The secpolev_init() function has already been called.
  • EPERM - Process lacks necessary abilities.
Page updated: