audit(1M)

NAME | SYNOPSIS | DESCRIPTION | OPTIONS | DIAGNOSTICS | FILES | ATTRIBUTES | SUMMARY OF TRUSTED SOLARIS CHANGES | SEE ALSO | NOTES

NAME

audit- Control the behavior of the audit daemon

SYNOPSIS

audit -n | | -s| | | -t

DESCRIPTION

The audit command is the general administrator's interface to maintaining the audit trail. The audit daemon may be notified to read the contents of the audit_control(4) file and re-initialize the current audit directory to the first directory listed in the audit_control file or to open a new audit file in the current audit directory specified in the audit_control file as last read by the audit daemon. The audit daemon may also be signaled to close the audit trail and disable auditing.

OPTIONS

-n

Signal audit daemon to close the current audit file and open a new audit file in the current audit directory.

-s

Signal audit daemon to read audit control file. The audit daemon stores the information internally.

-t

Signal audit daemon to close the current audit trail file, disable auditing and die.

DIAGNOSTICS

The audit command will exit with 0 upon success and a positive integer upon failure.

FILES

/etc/security/audit_user

File containing user information for system audit daemon.

/etc/security/audit_control

File containing information for system audit daemon.

ATTRIBUTES

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPE	ATTRIBUTE VALUE
Availability	SUNWcsu

SUMMARY OF TRUSTED SOLARIS CHANGES

This functionality is active only if auditing is enabled. By default, auditing is enabled in the Trusted Solaris environment. By default, the machine halts when audit files run out of disk space. The Trusted Solaris environment adds programming interfaces, audit classes, and audit events.

This command should run at ADMIN_HIGH.

SEE ALSO

Trusted Solaris 7 Reference Manual

praudit(1M), audit(2), audit_control(4), audit_user(4)

Trusted Solaris Audit Administration

SunOS 5.7 Reference Manual

attributes(5)

NOTES

This command does not modify a process' preselection mask. It only affects which audit directories are used for audit data storage and to specify the minimum size free.

Trusted Solaris 7  Last Revised 5 May 1998

NAME | SYNOPSIS | DESCRIPTION | OPTIONS | DIAGNOSTICS | FILES | ATTRIBUTES | SUMMARY OF TRUSTED SOLARIS CHANGES | SEE ALSO | NOTES