| auditreduce.1 (155290) | auditreduce.1 (155364) |
|---|---|
| 1.\" Copyright (c) 2004 Apple Computer, Inc. 2.\" All rights reserved. 3.\" 4.\" Redistribution and use in source and binary forms, with or without 5.\" modification, are permitted provided that the following conditions 6.\" are met: 7.\" 1. Redistributions of source code must retain the above copyright 8.\" notice, this list of conditions and the following disclaimer. --- 11 unchanged lines hidden (view full) --- 20.\" ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 21.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 22.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 23.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 24.\" STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING 25.\" IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 26.\" POSSIBILITY OF SUCH DAMAGE. 27.\" | 1.\" Copyright (c) 2004 Apple Computer, Inc. 2.\" All rights reserved. 3.\" 4.\" Redistribution and use in source and binary forms, with or without 5.\" modification, are permitted provided that the following conditions 6.\" are met: 7.\" 1. Redistributions of source code must retain the above copyright 8.\" notice, this list of conditions and the following disclaimer. --- 11 unchanged lines hidden (view full) --- 20.\" ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 21.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 22.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 23.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 24.\" STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING 25.\" IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 26.\" POSSIBILITY OF SUCH DAMAGE. 27.\" |
| 28.\" $P4: //depot/projects/trustedbsd/openbsm/bin/auditreduce/auditreduce.1#8 $ | 28.\" $P4: //depot/projects/trustedbsd/openbsm/bin/auditreduce/auditreduce.1#10 $ |
| 29.\" | 29.\" |
| 30.Dd Jan 24, 2004 | 30.Dd January 24, 2004 |
| 31.Dt AUDITREDUCE 1 32.Os 33.Sh NAME 34.Nm auditreduce 35.Nd "select records from audit trail files" 36.Sh SYNOPSIS 37.Nm auditreduce 38.Op Fl A --- 80 unchanged lines hidden (view full) --- 119Select records containing the given semaphore id. 120.It Nm shmid 121Select records containing the given shared memory id. 122.El 123.El 124.Sh Examples 125.Pp 126To select all records associated with effective user ID root from the audit | 31.Dt AUDITREDUCE 1 32.Os 33.Sh NAME 34.Nm auditreduce 35.Nd "select records from audit trail files" 36.Sh SYNOPSIS 37.Nm auditreduce 38.Op Fl A --- 80 unchanged lines hidden (view full) --- 119Select records containing the given semaphore id. 120.It Nm shmid 121Select records containing the given shared memory id. 122.El 123.El 124.Sh Examples 125.Pp 126To select all records associated with effective user ID root from the audit |
| 127log /var/audit/20031016184719.20031017122634: | 127log 128.Pa /var/audit/20031016184719.20031017122634 : |
| 128.Pp 129.Nm 130-e root /var/audit/20031016184719.20031017122634 131.Pp 132To select all 133.Xr setlogin 2 134events from that log: 135.Pp 136.Nm 137-m AUE_SETLOGIN /var/audit/20031016184719.20031017122634 138.Sh SEE ALSO | 129.Pp 130.Nm 131-e root /var/audit/20031016184719.20031017122634 132.Pp 133To select all 134.Xr setlogin 2 135events from that log: 136.Pp 137.Nm 138-m AUE_SETLOGIN /var/audit/20031016184719.20031017122634 139.Sh SEE ALSO |
| 140.Xr praudit 1 , |
|
| 139.Xr audit_control 5 , | 141.Xr audit_control 5 , |
| 140.Xr audit_event 5 , 141.Xr praudit 1 | 142.Xr audit_event 5 |
| 142.Sh AUTHORS 143This software was created by McAfee Research, the security research division 144of McAfee, Inc., under contract to Apple Computer Inc. 145Additional authors include Wayne Salamon, Robert Watson, and SPARTA Inc. 146.Pp 147The Basic Security Module (BSM) interface to audit records and audit event 148stream format were defined by Sun Microsystems. 149.Sh HISTORY 150The OpenBSM implementation was created by McAfee Research, the security 151division of McAfee Inc., under contract to Apple Computer Inc. in 2004. 152It was subsequently adopted by the TrustedBSD Project as the foundation for 153the OpenBSM distribution. | 143.Sh AUTHORS 144This software was created by McAfee Research, the security research division 145of McAfee, Inc., under contract to Apple Computer Inc. 146Additional authors include Wayne Salamon, Robert Watson, and SPARTA Inc. 147.Pp 148The Basic Security Module (BSM) interface to audit records and audit event 149stream format were defined by Sun Microsystems. 150.Sh HISTORY 151The OpenBSM implementation was created by McAfee Research, the security 152division of McAfee Inc., under contract to Apple Computer Inc. in 2004. 153It was subsequently adopted by the TrustedBSD Project as the foundation for 154the OpenBSM distribution. |