bsd/man/man2/auditctl.2

   1 .\"
   2 .\" Copyright (c) 2008 Apple Inc. All rights reserved.
   3 .\"
   4 .\" @APPLE_LICENSE_HEADER_START@
   5 .\"
   6 .\" This file contains Original Code and/or Modifications of Original Code
   7 .\" as defined in and that are subject to the Apple Public Source License
   8 .\" Version 2.0 (the 'License'). You may not use this file except in
   9 .\" compliance with the License. Please obtain a copy of the License at
  10 .\" http://www.opensource.apple.com/apsl/ and read it before using this
  11 .\" file.
  12 .\"
  13 .\" The Original Code and all software distributed under the License are
  14 .\" distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
  15 .\" EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
  16 .\" INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
  17 .\" FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
  18 .\" Please see the License for the specific language governing rights and
  19 .\" limitations under the License.
  20 .\"
  21 .\" @APPLE_LICENSE_HEADER_END@
  22 .\"
  23 .Dd April 19, 2005
  24 .Dt AUDITCTL 2
  25 .Os
  26 .Sh NAME
  27 .Nm auditctl
  28 .Nd "configure system audit parameters"
  29 .Sh SYNOPSIS
  30 .In bsm/audit.h
  31 .Ft int
  32 .Fn auditctl "const char *path"
  33 .Sh DESCRIPTION
  34 The
  35 .Fn auditctl
  36 system call directs the kernel to open a new audit trail log file.
  37 It requires an appropriate privilege.
  38 The
  39 .Fn auditctl
  40 system call
  41 opens new files, but
  42 .Xr auditon 2
  43 is used to disable the audit log.
  44 .Sh RETURN VALUES
  45 .Rv -std
  46 .Sh ERRORS
  47 The
  48 .Fn auditctl
  49 system call will fail if:
  50 .Bl -tag -width Er
  51 .It Bq Er EINVAL
  52 The path is invalid.
  53 .It Bq Er EPERM
  54 The process does not have sufficient permission to complete the
  55 operation.
  56 .El
  57 .Sh SEE ALSO
  58 .Xr auditon 2 ,
  59 .Xr libbsm 3 ,
  60 .Xr auditd 8
  61 .Sh HISTORY
  62 The OpenBSM implementation was created by McAfee Research, the security
  63 division of McAfee Inc., under contract to Apple Computer Inc.\& in 2004.
  64 It was subsequently adopted by the TrustedBSD Project as the foundation for
  65 the OpenBSM distribution.
  66 .Sh AUTHORS
  67 .An -nosplit
  68 This software was created by McAfee Research, the security research division
  69 of McAfee, Inc., under contract to Apple Computer Inc.
  70 Additional authors include
  71 .An Wayne Salamon ,
  72 .An Robert Watson ,
  73 and SPARTA Inc.
  74 .Pp
  75 The Basic Security Module (BSM) interface to audit records and audit event
  76 stream format were defined by Sun Microsystems.
  77 .Pp
  78 This manual page was written by
  79 .An Robert Watson Aq rwatson@FreeBSD.org .