audit.1   [plain text]


.\" Copyright (c) 2004, Apple Computer, Inc.  All rights reserved.
.\"
.Dd Jan 24, 2004
.Dt AUDIT 1
.Os "Mac OS X"
.Sh NAME
.Nm audit
.Nd audit management utility
.Sh SYNOPSIS
.Nm audit
.Op Fl nst
.Op Ar file
.Sh DESCRIPTION
The
.Nm 
utility controls the state of auditing system. The optional
.Ar file
operand specifies the location of the audit control input file (default
/etc/security/audit_control).  
.Pp
The options are as follows:
.Bl -tag -width Ds
.It Fl n
Forces the audit system to close the existing audit log file and rotate to
a new log file in a location specified in the audit control file.
.It Fl s
Specifies that the audit system should [re]synchronize its
configuration from the audit control file.  A new log file will be
created.
.It Fl t
Specifies that the audit system should terminate.  Log files are closed
and renamed to indicate the time of the shutdown.
.El
.Sh NOTES
The auditd(8) daemon must already be running.
.Sh FILES
.Bl -tag -width "/etc/security/audit_control" -compact
.It Pa /etc/security/audit_control
Default audit policy file used to configure the auditing system.
.El
.Sh SEE ALSO
.Xr audit_control 5 ,
.Xr auditd 8