Re: Problem with ausearch_set_param

[Steve Grubb <sgrubb@redhat.com>]

On Friday 18 January 2008 05:02:21 Mukul Khullar wrote:
> I am trying to use ausearch_set_param,

That function does not exist. 

> but the same when used along with 
> proper arguments, doesn't compile and gives an undefined reference. Is
> there some particular library which is to be included to use
> ausearch_set_param ? Eg code : ausearch_set_param(au, "auid", "=", "500",
> AUSEARCH_STOP_EVENT)) Error is :  /tmp/cciCPMs9.o: In function `main':
>                parselib.c:(.text+0x61): undefined reference to
> `ausearch_set_param'
>                collect2: ld returned 1 exit status


I think you are wanting:

int ausearch_add_item(auparse_state_t *au, const char *field, const char *op,
                        const char *value, ausearch_rule_t how);


-Steve