---
name: "audit_alloc"
section: "9"
platform: "linux"
package: "linux-manual-4.9"
version: "4.9.228-1"
release: "Debian 9 (Stretch)"
platforms: ["linux"]
url: "https://new.carta.tech/audit_alloc"
---

# audit\_alloc(9)

allocate an audit context block for a task

## NAME

audit\_alloc - allocate an audit context block for a task

## SYNOPSIS

**int audit\_alloc(struct task\_struct \*** *tsk***);**

## ARGUMENTS

*tsk*

task

## DESCRIPTION

Filter on the task information and allocate a per-task audit context if necessary. Doing so turns on system call auditing for the specified task. This is called from copy\_process, so no lock is needed.

## COPYRIGHT