1.\" Copyright (c) 2004 Apple Computer, Inc.
2.\" All rights reserved.
3.\"
4.\" Redistribution and use in source and binary forms, with or without
5.\" modification, are permitted provided that the following conditions
6.\" are met:
7.\" 1. Redistributions of source code must retain the above copyright
8.\" notice, this list of conditions and the following disclaimer.
--- 11 unchanged lines hidden (view full) ---
20.\" ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
24.\" STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
25.\" IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
26.\" POSSIBILITY OF SUCH DAMAGE.
27.\"
28.\" $P4: //depot/projects/trustedbsd/openbsm/bin/auditreduce/auditreduce.1#8 $
29.\"
30.Dd Jan 24, 2004
31.Dt AUDITREDUCE 1
32.Os
33.Sh NAME
34.Nm auditreduce
35.Nd "select records from audit trail files"
36.Sh SYNOPSIS
37.Nm auditreduce
38.Op Fl A
--- 80 unchanged lines hidden (view full) ---
119Select records containing the given semaphore id.
120.It Nm shmid
121Select records containing the given shared memory id.
122.El
123.El
124.Sh Examples
125.Pp
126To select all records associated with effective user ID root from the audit
127log /var/audit/20031016184719.20031017122634:
128.Pp
129.Nm
130-e root /var/audit/20031016184719.20031017122634
131.Pp
132To select all
133.Xr setlogin 2
134events from that log:
135.Pp
136.Nm
137-m AUE_SETLOGIN /var/audit/20031016184719.20031017122634
138.Sh SEE ALSO
139.Xr audit_control 5 ,
140.Xr audit_event 5 ,
141.Xr praudit 1
142.Sh AUTHORS
143This software was created by McAfee Research, the security research division
144of McAfee, Inc., under contract to Apple Computer Inc.
145Additional authors include Wayne Salamon, Robert Watson, and SPARTA Inc.
146.Pp
147The Basic Security Module (BSM) interface to audit records and audit event
148stream format were defined by Sun Microsystems.
149.Sh HISTORY
150The OpenBSM implementation was created by McAfee Research, the security
151division of McAfee Inc., under contract to Apple Computer Inc. in 2004.
152It was subsequently adopted by the TrustedBSD Project as the foundation for
153the OpenBSM distribution.
2.\" All rights reserved.
3.\"
4.\" Redistribution and use in source and binary forms, with or without
5.\" modification, are permitted provided that the following conditions
6.\" are met:
7.\" 1. Redistributions of source code must retain the above copyright
8.\" notice, this list of conditions and the following disclaimer.
--- 11 unchanged lines hidden (view full) ---
20.\" ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
24.\" STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
25.\" IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
26.\" POSSIBILITY OF SUCH DAMAGE.
27.\"
28.\" $P4: //depot/projects/trustedbsd/openbsm/bin/auditreduce/auditreduce.1#8 $
29.\"
30.Dd Jan 24, 2004
31.Dt AUDITREDUCE 1
32.Os
33.Sh NAME
34.Nm auditreduce
35.Nd "select records from audit trail files"
36.Sh SYNOPSIS
37.Nm auditreduce
38.Op Fl A
--- 80 unchanged lines hidden (view full) ---
119Select records containing the given semaphore id.
120.It Nm shmid
121Select records containing the given shared memory id.
122.El
123.El
124.Sh Examples
125.Pp
126To select all records associated with effective user ID root from the audit
127log /var/audit/20031016184719.20031017122634:
128.Pp
129.Nm
130-e root /var/audit/20031016184719.20031017122634
131.Pp
132To select all
133.Xr setlogin 2
134events from that log:
135.Pp
136.Nm
137-m AUE_SETLOGIN /var/audit/20031016184719.20031017122634
138.Sh SEE ALSO
139.Xr audit_control 5 ,
140.Xr audit_event 5 ,
141.Xr praudit 1
142.Sh AUTHORS
143This software was created by McAfee Research, the security research division
144of McAfee, Inc., under contract to Apple Computer Inc.
145Additional authors include Wayne Salamon, Robert Watson, and SPARTA Inc.
146.Pp
147The Basic Security Module (BSM) interface to audit records and audit event
148stream format were defined by Sun Microsystems.
149.Sh HISTORY
150The OpenBSM implementation was created by McAfee Research, the security
151division of McAfee Inc., under contract to Apple Computer Inc. in 2004.
152It was subsequently adopted by the TrustedBSD Project as the foundation for
153the OpenBSM distribution.