public inbox for linux-audit@redhat.com
 help / color / mirror / Atom feed
* Problem with ausearch_set_param
@ 2008-01-18 10:02 Mukul Khullar
  2008-01-18 21:37 ` Steve Grubb
  0 siblings, 1 reply; 2+ messages in thread
From: Mukul Khullar @ 2008-01-18 10:02 UTC (permalink / raw)
  To: linux-audit


[-- Attachment #1.1: Type: text/plain, Size: 528 bytes --]

I am trying to use ausearch_set_param, but the same when used along with
proper arguments, doesn't compile and gives an undefined reference. Is there
some particular library which is to be included to use ausearch_set_param ?
Eg code : ausearch_set_param(au, "auid", "=", "500", AUSEARCH_STOP_EVENT))
Error is :  /tmp/cciCPMs9.o: In function `main':
               parselib.c:(.text+0x61): undefined reference to
`ausearch_set_param'
               collect2: ld returned 1 exit status


Please help,
Thanking you,
Mukul Khullar

[-- Attachment #1.2: Type: text/html, Size: 749 bytes --]

[-- Attachment #2: Type: text/plain, Size: 0 bytes --]



^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: Problem with ausearch_set_param
  2008-01-18 10:02 Problem with ausearch_set_param Mukul Khullar
@ 2008-01-18 21:37 ` Steve Grubb
  0 siblings, 0 replies; 2+ messages in thread
From: Steve Grubb @ 2008-01-18 21:37 UTC (permalink / raw)
  To: linux-audit; +Cc: Mukul Khullar

On Friday 18 January 2008 05:02:21 Mukul Khullar wrote:
> I am trying to use ausearch_set_param,

That function does not exist. 

> but the same when used along with 
> proper arguments, doesn't compile and gives an undefined reference. Is
> there some particular library which is to be included to use
> ausearch_set_param ? Eg code : ausearch_set_param(au, "auid", "=", "500",
> AUSEARCH_STOP_EVENT)) Error is :  /tmp/cciCPMs9.o: In function `main':
>                parselib.c:(.text+0x61): undefined reference to
> `ausearch_set_param'
>                collect2: ld returned 1 exit status


I think you are wanting:

int ausearch_add_item(auparse_state_t *au, const char *field, const char *op,
                        const char *value, ausearch_rule_t how);


-Steve

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2008-01-18 21:37 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2008-01-18 10:02 Problem with ausearch_set_param Mukul Khullar
2008-01-18 21:37 ` Steve Grubb

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox