auditmask_style(4) Kernel Interfaces Manual auditmask_style(4)
NAME
auditmask_style - Audit configuration file for auditconfig
DESCRIPTION
The auditmask_style file shadows the /etc/sec/event_aliases file for use by the auditconfig utility. Event aliases only need to occur in
the auditmask_style file if the audit mask style requires a specific setting.
Specifying an entry turns it on. There is no explict turning off using this file. Note that the obj_sel alias overides the obj_desel
alias.
The -s option in the auditmask(8) reference page contains more detail for valid entries. Valid characters other than the object categories
and aliases are "#", ":", and white space.
FILES
The auditconfig utility executable. Audit event alias configuration file Audit events. Audit events... Audit events... Audit events...
Audit event...
RELATED INFORMATION
Commands: auditmask(8), auditd(8), auditconfig(8)
Security delim off
auditmask_style(4)