1.\" Copyright (c) 2004 Apple Computer, Inc.
2.\" All rights reserved.
3.\"
4.\" Redistribution and use in source and binary forms, with or without
5.\" modification, are permitted provided that the following conditions
6.\" are met:
7.\" 1. Redistributions of source code must retain the above copyright
8.\" notice, this list of conditions and the following disclaimer.
--- 11 unchanged lines hidden (view full) ---
20.\" ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
24.\" STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
25.\" IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
26.\" POSSIBILITY OF SUCH DAMAGE.
27.\"
28.\" $P4: //depot/projects/trustedbsd/openbsm/bin/auditreduce/auditreduce.1#10 $
29.\"
30.Dd January 24, 2004
31.Dt AUDITREDUCE 1
32.Os
33.Sh NAME
34.Nm auditreduce
35.Nd "select records from audit trail files"
36.Sh SYNOPSIS
37.Nm auditreduce
38.Op Fl A
--- 80 unchanged lines hidden (view full) ---
119Select records containing the given semaphore id.
120.It Nm shmid
121Select records containing the given shared memory id.
122.El
123.El
124.Sh Examples
125.Pp
126To select all records associated with effective user ID root from the audit
127log
128.Pa /var/audit/20031016184719.20031017122634 :
129.Pp
130.Nm
131-e root /var/audit/20031016184719.20031017122634
132.Pp
133To select all
134.Xr setlogin 2
135events from that log:
136.Pp
137.Nm
138-m AUE_SETLOGIN /var/audit/20031016184719.20031017122634
139.Sh SEE ALSO
140.Xr praudit 1 ,
141.Xr audit_control 5 ,
142.Xr audit_event 5
143.Sh AUTHORS
144This software was created by McAfee Research, the security research division
145of McAfee, Inc., under contract to Apple Computer Inc.
146Additional authors include Wayne Salamon, Robert Watson, and SPARTA Inc.
147.Pp
148The Basic Security Module (BSM) interface to audit records and audit event
149stream format were defined by Sun Microsystems.
150.Sh HISTORY
151The OpenBSM implementation was created by McAfee Research, the security
152division of McAfee Inc., under contract to Apple Computer Inc. in 2004.
153It was subsequently adopted by the TrustedBSD Project as the foundation for
154the OpenBSM distribution.
2.\" All rights reserved.
3.\"
4.\" Redistribution and use in source and binary forms, with or without
5.\" modification, are permitted provided that the following conditions
6.\" are met:
7.\" 1. Redistributions of source code must retain the above copyright
8.\" notice, this list of conditions and the following disclaimer.
--- 11 unchanged lines hidden (view full) ---
20.\" ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
24.\" STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
25.\" IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
26.\" POSSIBILITY OF SUCH DAMAGE.
27.\"
28.\" $P4: //depot/projects/trustedbsd/openbsm/bin/auditreduce/auditreduce.1#10 $
29.\"
30.Dd January 24, 2004
31.Dt AUDITREDUCE 1
32.Os
33.Sh NAME
34.Nm auditreduce
35.Nd "select records from audit trail files"
36.Sh SYNOPSIS
37.Nm auditreduce
38.Op Fl A
--- 80 unchanged lines hidden (view full) ---
119Select records containing the given semaphore id.
120.It Nm shmid
121Select records containing the given shared memory id.
122.El
123.El
124.Sh Examples
125.Pp
126To select all records associated with effective user ID root from the audit
127log
128.Pa /var/audit/20031016184719.20031017122634 :
129.Pp
130.Nm
131-e root /var/audit/20031016184719.20031017122634
132.Pp
133To select all
134.Xr setlogin 2
135events from that log:
136.Pp
137.Nm
138-m AUE_SETLOGIN /var/audit/20031016184719.20031017122634
139.Sh SEE ALSO
140.Xr praudit 1 ,
141.Xr audit_control 5 ,
142.Xr audit_event 5
143.Sh AUTHORS
144This software was created by McAfee Research, the security research division
145of McAfee, Inc., under contract to Apple Computer Inc.
146Additional authors include Wayne Salamon, Robert Watson, and SPARTA Inc.
147.Pp
148The Basic Security Module (BSM) interface to audit records and audit event
149stream format were defined by Sun Microsystems.
150.Sh HISTORY
151The OpenBSM implementation was created by McAfee Research, the security
152division of McAfee Inc., under contract to Apple Computer Inc. in 2004.
153It was subsequently adopted by the TrustedBSD Project as the foundation for
154the OpenBSM distribution.