audit(7) [osf1 man page]

audit(7)						 Miscellaneous Information Manual						  audit(7)

NAME

       audit - audit log interface

DESCRIPTION

       This  is a special character device that provides an interface for the audit daemon process, /usr/sbin/auditd, to the kernel audit buffers.
       /dev is now a context dependent symbolic link (CDSL) to /cluster/members/{member}/dev.

RESTRICTIONS

       This device should be readable only by root, to protect access by nonsystem processes.  The major number assigned to this device must  cor-
       relate with the corresponding major number designation in the system kernel.

FILES

       /dev/audit

RELATED INFORMATION

       /MAKEDEV(8), auditd(8)

       Security delim off

																	  audit(7)

audit_data(4)							   File Formats 						     audit_data(4)

NAME

       audit_data - current information on audit daemon

SYNOPSIS

       /etc/security/audit_data

DESCRIPTION

       The  audit_data file contains information about the audit daemon. The file contains the process ID of the audit daemon, and the pathname of
       the current audit log file. The format of the file is:

	      pid>:<pathname>

       Where pid is the process ID for the audit daemon, and pathname is the full pathname for the current audit log file.

EXAMPLES

       Example 1: A sample audit_data file.

       64:/etc/security/audit/server1/19930506081249.19930506230945.bongos

FILES

       /etc/security/audit_data

ATTRIBUTES

       See attributes(5) for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE	     |	    ATTRIBUTE VALUE	   |
       +-----------------------------+-----------------------------+
       |Interface Stability	     |Obsolete			   |
       +-----------------------------+-----------------------------+

SEE ALSO

       audit(1M), auditd(1M), bsmconv(1M), audit(2), audit_control(4), audit.log(4)

NOTES

       The functionality described on this manual page is internal to audit(1M) and might not be supported in a future release.

       The auditd utility is the only supported mechanism to communicate with auditd(1M). The current audit log can be determined by examining the
       configured audit directories. See audit_control(4).

       The  functionality described on this manual page is available only if the Basic Security Module (BSM) has been enabled. See bsmconv(1M) for
       more information.

SunOS 5.10							    14 Nov 2002 						     audit_data(4)