Recording Global Auditors
Global auditing requirements can be established by setting the environment
variable LD_AUDIT
. For example, this environment variable can be
used to audit the application main
together with all the
dependencies of the application, with the audit library
audit.so.1
.
$ LD_AUDIT=audit.so.1 main
Global auditing can also be achieved by recording a local auditor in the
application, together with the -z globalaudit
option. For
example, the application main
can be built to enable global
auditing by using the link-editor's -P
option and
-z globalaudit
option.
$ cc -o main main.c -Wl,-Paudit.so.1 -z globalaudit $ elfdump -d main | grep AUDIT [3] DEPAUDIT 0x1b2 audit.so.1 [26] FLAGS_1 0x1000000 [ GLOBAL-AUDITING ]
The auditing enabled through either of these mechanisms results in the audit library being passed information regarding all of the dynamic objects of the application.