---
name: "audit_can_read"
section: "3"
platform: "linux"
package: "audit"
version: "4.2.1-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/audit_can_read"
---

# audit\_can\_read(3)

test audit related capabilities

## NAME

audit\_can\_control, audit\_can\_write, audit\_can\_read - test audit related capabilities

## SYNOPSIS

**#include \<libaudit.h\>**

**int audit\_can\_control(void);**\
 **int audit\_can\_write(void);**\
 **int audit\_can\_read(void);**

## DESCRIPTION

**audit\_can\_control**() returns 1 if the calling process possesses the **CAP\_AUDIT\_CONTROL** capability, otherwise 0. **audit\_can\_write**() returns 1 if **CAP\_AUDIT\_WRITE** is available.   **audit\_can\_read**() returns 1 if **CAP\_AUDIT\_READ** is present.  When libcap-ng support is not available these functions return 1 only when the effective UID is 0.

## RETURN VALUE

These functions return 1 when the capability is present and 0 otherwise.

## SEE ALSO

[**audit\_open**(3)](/audit_open/3.md).

## AUTHOR

Steve Grubb