From mboxrd@z Thu Jan  1 00:00:00 1970
From: Steve Grubb <sgrubb@redhat.com>
Subject: Re: Problem with ausearch_set_param
Date: Fri, 18 Jan 2008 16:37:16 -0500
Message-ID: <200801181637.17053.sgrubb@redhat.com>
References: <b484796a0801180202n179e0ae9m6867420193daca2f@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain;
  charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Return-path: <linux-audit-bounces@redhat.com>
In-Reply-To: <b484796a0801180202n179e0ae9m6867420193daca2f@mail.gmail.com>
Content-Disposition: inline
List-Unsubscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: linux-audit@redhat.com
Cc: Mukul Khullar <auditmk@gmail.com>
List-Id: linux-audit@redhat.com

On Friday 18 January 2008 05:02:21 Mukul Khullar wrote:
> I am trying to use ausearch_set_param,

That function does not exist.=20

> but the same when used along with=20
> proper arguments, doesn't compile and gives an undefined reference. Is
> there some particular library which is to be included to use
> ausearch_set_param ? Eg code : ausearch_set_param(au, "auid", "=3D", "5=
00",
> AUSEARCH_STOP_EVENT)) Error is : =C2=A0/tmp/cciCPMs9.o: In function `ma=
in':
> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0parselib.c:(.tex=
t+0x61): undefined reference to
> `ausearch_set_param'
> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0collect2: ld ret=
urned 1 exit status


I think you are wanting:

int ausearch_add_item(auparse_state_t *au, const char *field, const char =
*op,
                        const char *value, ausearch_rule_t how);


-Steve