1. NAME▲

__audit_syscall_exit - deallocate audit context after a system call

2. SYNOPSIS ▲

void __audit_syscall_exit(int  success , long  return_code );

3. ARGUMENTS ▲

success
    success value of the syscall

return_code
    return value of the syscall

4. DESCRIPTION ▲

Tear down after system call. If the audit context has been marked as auditable (either because of the AUDIT_RECORD_CONTEXT state from filtering, or because some other part of the kernel wrote an audit message), then write out the syscall information. In call cases, free the names stored from getname.

5. COPYRIGHT ▲