Manual Pages for UNIX Operating System command usage for man audit

System Administration Commands                          audit(1M)



NAME
     audit - control the behavior of the audit daemon

SYNOPSIS
     audit -n | -s | -t | -v


DESCRIPTION
     The audit command is the system administrator's interface to
     start,  stop,  and  refresh  the  audit  service auditd(1M).
     Refreshing the audit service rereads the system  and  plugin
     configuration.

OPTIONS
     -n    Notify the audit service audit_binfile plugin to close
           the  current  audit  file and open a new audit file in
           the current audit directory.


     -s    Start (enable) the audit service if it is not running,
           or  refresh the audit service, if it is currently run-
           ning.


     -t    Terminate (disable) the audit service.  The audit ser-
           vice  will close out the active plugins, stop auditing
           and exit. Use -s to restart auditing.


     -v    Verify that at least one plugin is active. Verify  the
           directory parameters of audit_binfile(5).


DIAGNOSTICS
     The audit command will exit with 0 upon success and a  posi-
     tive integer upon failure.

ATTRIBUTES
     See attributes(5) for descriptions of the  following  attri-
     butes:















SunOS 5.11          Last change: 30 Aug 2010                    1






System Administration Commands                          audit(1M)



     ____________________________________________________________
    |       ATTRIBUTE TYPE        |       ATTRIBUTE VALUE       |
    |_____________________________|_____________________________|
    | Availability                | SUNWcsu                     |
    |_____________________________|_____________________________|
    | Interface Stability         | Committed                   |
    |_____________________________|_____________________________|


SEE ALSO
     auditconfig(1M), auditd(1M), attributes(5), audit_binfile(5)


     See the section on Solaris Auditing in System Administration
     Guide: Security Services.

NOTES
     The audit command does not modify a  process's  preselection
     mask.  Its  functions  are  limited  to  performing  control
     actions of the auditing subsystem. See  auditconfig(1M)  for
     configuration.


     The -s option validates the audit plugin  configuration.  If
     it  is not valid an error message is displayed and the audit
     service is not started or refreshed. The -v  option  may  be
     used to validate the audit plugin configuration before using
     the -s option to start or refresh the audit service.


     All options are valid in the global zone. Unless per-zone is
     enabled,  only  the  -v option is valid in a local zone. See
     auditconfig(1M) for per-zone audit configuration.






















SunOS 5.11          Last change: 30 Aug 2010                    2