---
name: "audit_update_watch_perms"
section: "3"
platform: "linux"
package: "audit"
version: "4.2.1-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/audit_update_watch_perms"
---

# audit\_update\_watch\_perms(3)

update permissions field of watch command

## NAME

audit\_update\_watch\_perms - update permissions field of watch command

## SYNOPSIS

**#include \<libaudit.h\>**

**int audit\_update\_watch\_perms(struct audit\_rule\_data \****rule,***int"***perms);"*

## DESCRIPTION

audit\_update\_watch\_perms adds the permission checks to a watch command that is being built. The perms are a bitwise or'ing of: AUDIT\_PERM\_EXEC, AUDIT\_PERM\_WRITE, AUDIT\_PERM\_READ, AUDIT\_PERM\_ATTR.

## RETURN VALUE

Returns a number \< 0 if an error occurs; otherwise, 0 for success.

## SEE ALSO

[**audit\_add\_rule\_data**(3)](/audit_add_rule_data/3.md), [**audit\_add\_watch**(3)](/audit_add_watch/3.md).

## AUTHOR

Steve Grubb