1.\" Copyright (c) 2004 Apple Computer, Inc.
2.\" All rights reserved.
3.\"
| 1.\" Copyright (c) 2004 Apple Computer, Inc.
2.\" All rights reserved.
3.\"
|
4.\" @APPLE_BSD_LICENSE_HEADER_START@
5.\"
| |
6.\" Redistribution and use in source and binary forms, with or without
7.\" modification, are permitted provided that the following conditions
8.\" are met:
9.\"
10.\" 1. Redistributions of source code must retain the above copyright
11.\" notice, this list of conditions and the following disclaimer.
12.\" 2. Redistributions in binary form must reproduce the above copyright
13.\" notice, this list of conditions and the following disclaimer in the
14.\" documentation and/or other materials provided with the distribution.
15.\" 3. Neither the name of Apple Computer, Inc. ("Apple") nor the names of
16.\" its contributors may be used to endorse or promote products derived
17.\" from this software without specific prior written permission.
18.\"
19.\" THIS SOFTWARE IS PROVIDED BY APPLE AND ITS CONTRIBUTORS "AS IS" AND ANY
20.\" EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
21.\" WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
22.\" DISCLAIMED. IN NO EVENT SHALL APPLE OR ITS CONTRIBUTORS BE LIABLE FOR ANY
23.\" DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
24.\" (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
25.\" LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
26.\" ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
27.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
28.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
29.\"
| 4.\" Redistribution and use in source and binary forms, with or without
5.\" modification, are permitted provided that the following conditions
6.\" are met:
7.\"
8.\" 1. Redistributions of source code must retain the above copyright
9.\" notice, this list of conditions and the following disclaimer.
10.\" 2. Redistributions in binary form must reproduce the above copyright
11.\" notice, this list of conditions and the following disclaimer in the
12.\" documentation and/or other materials provided with the distribution.
13.\" 3. Neither the name of Apple Computer, Inc. ("Apple") nor the names of
14.\" its contributors may be used to endorse or promote products derived
15.\" from this software without specific prior written permission.
16.\"
17.\" THIS SOFTWARE IS PROVIDED BY APPLE AND ITS CONTRIBUTORS "AS IS" AND ANY
18.\" EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
19.\" WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
20.\" DISCLAIMED. IN NO EVENT SHALL APPLE OR ITS CONTRIBUTORS BE LIABLE FOR ANY
21.\" DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
22.\" (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
23.\" LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
24.\" ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
25.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
26.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27.\"
|
30.\" @APPLE_BSD_LICENSE_HEADER_END@
| 28.\" $P4: //depot/projects/trustedbsd/openbsm/bin/auditd/auditd.8#13 $
|
31.\"
| 29.\"
|
32.\" $P4: //depot/projects/trustedbsd/openbsm/bin/auditd/auditd.8#12 $
33.\"
| |
34.Dd October 2, 2006
35.Dt AUDITD 8
36.Os
37.Sh NAME
38.Nm auditd
39.Nd audit log management daemon
40.Sh SYNOPSIS
41.Nm
42.Op Fl d
43.Sh DESCRIPTION
44The
45.Nm
46daemon responds to requests from the
47.Xr audit 8
48utility and notifications
49from the kernel.
50It manages the resulting audit log files and specified
51log file locations.
52.Pp
53The options are as follows:
54.Bl -tag -width indent
55.It Fl d
56Starts the daemon in debug mode \[em] it will not daemonize.
57.El
58.Sh NOTE
59To assure uninterrupted audit support, the
60.Nm
61daemon should not be started and stopped manually.
62Instead, the
63.Xr audit 8
64command
65should be used to inform the daemon to change state/configuration after altering
66the
67.Pa audit_control
68file.
69.Pp
70.\" Sending a
71.\" .Dv SIGHUP
72.\" to a running
73.\" .Nm
74.\" daemon will force it to exit.
75Sending a
76.Dv SIGTERM
77to a running
78.Nm
79daemon will force it to exit.
80.Sh FILES
81.Bl -tag -width ".Pa /var/audit" -compact
82.It Pa /var/audit
83Default directory for storing audit log files.
84.El
85.Sh COMPATIBILITY
86The historical
87.Fl h
88and
89.Fl s
90flags are now configured using
91.Xr audit_control 5
92policy flags
93.Cm ahlt
94and
95.Cm cnt ,
96and are no longer available as arguments to
97.Nm .
98.Sh SEE ALSO
99.Xr audit 4 ,
100.Xr audit_control 5 ,
101.Xr audit 8
102.Sh HISTORY
103The OpenBSM implementation was created by McAfee Research, the security
104division of McAfee Inc., under contract to Apple Computer Inc.\& in 2004.
105It was subsequently adopted by the TrustedBSD Project as the foundation for
106the OpenBSM distribution.
107.Sh AUTHORS
108.An -nosplit
109This software was created by McAfee Research, the security research division
110of McAfee, Inc., under contract to Apple Computer Inc.
111Additional authors include
112.An Wayne Salamon ,
113.An Robert Watson ,
114and SPARTA Inc.
115.Pp
116The Basic Security Module (BSM) interface to audit records and audit event
117stream format were defined by Sun Microsystems.
| 30.Dd October 2, 2006
31.Dt AUDITD 8
32.Os
33.Sh NAME
34.Nm auditd
35.Nd audit log management daemon
36.Sh SYNOPSIS
37.Nm
38.Op Fl d
39.Sh DESCRIPTION
40The
41.Nm
42daemon responds to requests from the
43.Xr audit 8
44utility and notifications
45from the kernel.
46It manages the resulting audit log files and specified
47log file locations.
48.Pp
49The options are as follows:
50.Bl -tag -width indent
51.It Fl d
52Starts the daemon in debug mode \[em] it will not daemonize.
53.El
54.Sh NOTE
55To assure uninterrupted audit support, the
56.Nm
57daemon should not be started and stopped manually.
58Instead, the
59.Xr audit 8
60command
61should be used to inform the daemon to change state/configuration after altering
62the
63.Pa audit_control
64file.
65.Pp
66.\" Sending a
67.\" .Dv SIGHUP
68.\" to a running
69.\" .Nm
70.\" daemon will force it to exit.
71Sending a
72.Dv SIGTERM
73to a running
74.Nm
75daemon will force it to exit.
76.Sh FILES
77.Bl -tag -width ".Pa /var/audit" -compact
78.It Pa /var/audit
79Default directory for storing audit log files.
80.El
81.Sh COMPATIBILITY
82The historical
83.Fl h
84and
85.Fl s
86flags are now configured using
87.Xr audit_control 5
88policy flags
89.Cm ahlt
90and
91.Cm cnt ,
92and are no longer available as arguments to
93.Nm .
94.Sh SEE ALSO
95.Xr audit 4 ,
96.Xr audit_control 5 ,
97.Xr audit 8
98.Sh HISTORY
99The OpenBSM implementation was created by McAfee Research, the security
100division of McAfee Inc., under contract to Apple Computer Inc.\& in 2004.
101It was subsequently adopted by the TrustedBSD Project as the foundation for
102the OpenBSM distribution.
103.Sh AUTHORS
104.An -nosplit
105This software was created by McAfee Research, the security research division
106of McAfee, Inc., under contract to Apple Computer Inc.
107Additional authors include
108.An Wayne Salamon ,
109.An Robert Watson ,
110and SPARTA Inc.
111.Pp
112The Basic Security Module (BSM) interface to audit records and audit event
113stream format were defined by Sun Microsystems.
|