---
name: "audit_log_acct_message"
section: "3"
platform: "linux"
package: "audit"
version: "4.2.1-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/audit_log_acct_message"
---

# audit\_log\_acct\_message(3)

log a user account message

## NAME

audit\_log\_acct\_message - log a user account message

## SYNOPSIS

```
#include <libaudit.h>
```

**int audit\_log\_acct\_message(int** *audit\_fd***,**                            **int** *type***,**                            **const char \****pgname***,**                            **const char \****op***,**                            **const char \****name***,**                            **unsigned int** *id***,**                            **const char \****host***,**                            **const char \****addr***,**                            **const char \****tty***,**                            **int** *result***);**

## DESCRIPTION

This function will log a message to the audit system using a predefined message format. It should be used for all account manipulation operations. The function parameters are as follows:

- *audit\_fd* - The fd returned by audit\_open

  - *type* - type of message: AUDIT\_USER\_CHAUTHTOK for changing any account attributes.

  - *pgname* - program's name, if NULL will attempt to figure out

  - op - operation. Ex: "adding-user", "changing-finger-info", "deleting-group". This value should have a dash or underscore between the words so that report parsers group them together.

  - *name* - user's account or group name. If not available use NULL.

  - id - uid or gid that the operation is being performed on. If the user is unknown, pass a -1 and fill in the name parameter. This is used only when user is NULL.

  - *host* - The hostname if known. If not available pass a NULL.

  - *addr* - The network address of the user. If not available pass a NULL.

  - tty - The tty of the user, if NULL will attempt to figure out

  - *result* - 1 is "success" and 0 is "failed"

  ## RETURN VALUE

It returns the sequence number which is \> 0 on success or \<= 0 on error.

## ERRORS

This function returns -1 on failure. Examine errno for more info.

## SEE ALSO

[**audit\_log\_user\_message**(3)](/audit_log_user_message/3.md), [**audit\_log\_user\_comm\_message**(3)](/audit_log_user_comm_message/3.md), [**audit\_log\_user\_avc\_message**(3)](/audit_log_user_avc_message/3.md), [**audit\_log\_semanage\_message**(3)](/audit_log_semanage_message/3.md).

## AUTHOR

Steve Grubb