The auditconfig, auditreduce, and auditrecord commands are extended to handle Trusted Extensions information:
The auditconfig command includes the Trusted Extensions audit policies. For details, see the auditconfig(1M) man page.
The auditreduce command adds the –l option for filtering records according to the label. For details, see the auditreduce(1M) man page.
The auditrecord command includes the Trusted Extensions audit events.