Resolving syscall numbers

[James Antill]

On Mon, 2006-06-12 at 11:10 -0400, Steve wrote:
> This may not be appropriate for this list, if it isn't I apologize and 
> you may ignore it.
> 
> Is there an quick way to resolve the syscall number that auditd returns 
> within a message to a syscall name? (ie. 5->open)?
> 
> I am programming in C, if that helps.

 Use audit_syscall_to_name(num, audit_detect_machine())

-- 
James Antill <james.antill at redhat.com>
Red Hat
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20060612/84ef8b36/attachment.sig>