[apple/system_cmds.git] / audit.tproj / audit.1

.\" Copyright (c) 2004, Apple Computer, Inc.  All rights reserved.
.\"
.Dd Jan 24, 2004
.Dt AUDIT 1
.Os "Mac OS X"
.Sh NAME
.Nm audit
.Nd audit management utility
.Sh SYNOPSIS
.Nm audit
.Op Fl nst
.Op Ar file
.Sh DESCRIPTION
The
.Nm 
utility controls the state of auditing system. The optional
.Ar file
operand specifies the location of the audit control input file (default
/etc/security/audit_control).  
.Pp
The options are as follows:
.Bl -tag -width Ds
.It Fl n
Forces the audit system to close the existing audit log file and rotate to
a new log file in a location specified in the audit control file.
.It Fl s
Specifies that the audit system should [re]synchronize its
configuration from the audit control file.  A new log file will be
created.
.It Fl t
Specifies that the audit system should terminate.  Log files are closed
and renamed to indicate the time of the shutdown.
.El
.Sh NOTES
The auditd(8) daemon must already be running.
.Sh FILES
.Bl -tag -width "/etc/security/audit_control" -compact
.It Pa /etc/security/audit_control
Default audit policy file used to configure the auditing system.
.El
.Sh SEE ALSO
.Xr auditd 8
.Xr audit_control 5
Commit	Line	Data
2fc1e207 A	1	.\" Copyright (c) 2004, Apple Computer, Inc. All rights reserved.
	2	.\"
	3	.Dd Jan 24, 2004
	4	.Dt AUDIT 1
	5	.Os "Mac OS X"
	6	.Sh NAME
	7	.Nm audit
	8	.Nd audit management utility
	9	.Sh SYNOPSIS
	10	.Nm audit
	11	.Op Fl nst
	12	.Op Ar file
	13	.Sh DESCRIPTION
	14	The
	15	.Nm
	16	utility controls the state of auditing system. The optional
	17	.Ar file
	18	operand specifies the location of the audit control input file (default
	19	/etc/security/audit_control).
	20	.Pp
	21	The options are as follows:
	22	.Bl -tag -width Ds
	23	.It Fl n
	24	Forces the audit system to close the existing audit log file and rotate to
	25	a new log file in a location specified in the audit control file.
	26	.It Fl s
	27	Specifies that the audit system should [re]synchronize its
	28	configuration from the audit control file. A new log file will be
	29	created.
	30	.It Fl t
	31	Specifies that the audit system should terminate. Log files are closed
	32	and renamed to indicate the time of the shutdown.
	33	.El
	34	.Sh NOTES
	35	The auditd(8) daemon must already be running.
	36	.Sh FILES
	37	.Bl -tag -width "/etc/security/audit_control" -compact
	38	.It Pa /etc/security/audit_control
	39	Default audit policy file used to configure the auditing system.
	40	.El
	41	.Sh SEE ALSO
	42	.Xr auditd 8
	43	.Xr audit_control 5