The audit_startup script is used to initialize the audit subsystem before the audit deamon is started. This script is configurable by the security administrator, and currently consists of a series of auditconfig(1M) commands to set the system default policy, and download the initial event to class mapping.
By default, the audit module is enabled in the Trusted Solaris environment. By default, the machine halts when audit files run out of disk space. The Trusted Solaris environment adds programming interfaces, audit classes, and audit events.