---
name: "audit_close"
section: "3"
platform: "linux"
package: "audit"
version: "4.2.1-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/audit_close"
---

# audit\_close(3)

Close the audit netlink socket connection

## NAME

audit\_close - Close the audit netlink socket connection

## SYNOPSIS

```
#include <libaudit.h>
```

**void audit\_close(int** *fd***);**

## DESCRIPTION

**audit\_close**() closes the NETLINK\_AUDIT socket that communicates with the kernel part of the Linux Audit Subsystem. *fd* must have been returned by [**audit\_open**(3)](/audit_open/3.md).

## RETURN VALUE

None.

## SEE ALSO

[**audit\_open**(3)](/audit_open/3.md), [**netlink**(7)](/netlink/7.md).

## AUTHOR

Steve Grubb