Manual Pages for UNIX Operating System command usage for man audit_binfile

Standards, Environments, and Macros              audit_binfile(5)



NAME
     audit_binfile - generation of Solaris audit logs

SYNOPSIS
     /usr/lib/security/audit_binfile.so


DESCRIPTION
     The  audit_binfile  plugin   module   for   Solaris   audit,
     /usr/lib/security/audit_binfile.so, writes binary audit data
     to files as configured in auditconfig(1M); it is the default
     plugin  for  the Solaris audit daemon auditd(1M). Its output
     is described by audit.log(4).


     The audit_binfile plugin is loaded by auditd if  the  plugin
     is   configured  as  an  active  via  auditconfig.  Use  the
     auditconfig -setplugin  option  to  change  all  the  plugin
     related configuration parameters.

OBJECT ATTRIBUTES
     The  following  attributes  specify  the  configuration   of
     audit_binfile plugin:

     p_dir


           dir1[,dir2],.. [,dirn]


         A list of directories, where the  audit  files  will  be
         created. Any valid writable directory can be specified.


     p_minfree

         A percentage, which indicates the amount of  free  space
         required  on the target p_dir. If free space falls below
         this threshold, the audit daemon auditd(1M) invokes  the
         shell  script  audit_warn(1M). If no threshold is speci-
         fied, the default is 0%.


     p_fsize

         The p_fsize attribute defines the maximum size in  bytes
         that an audit file can become before it is automatically
         closed and a new audit file opened. This  is  equivalent
         to an administrator issuing an audit -n command when the
         audit file contains the specified number of  bytes.  The
         default  size is zero (0), which allows the file to grow
         without bound. The value specified must  be  within  the



SunOS 5.11          Last change: 22 Jun 2010                    1






Standards, Environments, and Macros              audit_binfile(5)



         range of [512,000, 2,147,483,647].


EXAMPLES
     The  following  directives  cause  audit_binfile.so  to   be
     loaded,  specify the directories for writing audit logs, and
     specify the percentage of required free space per directory.

       auditconfig -setplugin audit_binfile active \
           "p_dir=/var/audit/jedgar/eggplant,/var/audit/jedgar.aux/eggplant,
            /var/audit/global/eggplant;p_minfree=20"



ATTRIBUTES
     See attributes(5) for a description of the following  attri-
     butes:



     ____________________________________________________________
    |       ATTRIBUTE TYPE        |       ATTRIBUTE VALUE       |
    |_____________________________|_____________________________|
    | MT Level                    | MT-Safe                     |
    |_____________________________|_____________________________|
    | Interface Stability         | Committed                   |
    |_____________________________|_____________________________|


SEE ALSO
     auditconfig(1M), auditd(1M), audit_warn(1M), syslog.conf(4),
     attributes(5)


     System Administration Guide: Security Services




















SunOS 5.11          Last change: 22 Jun 2010                    2