Provided by: freebsd-manpages_6.2-1_all
auditctl - Configure system audit parameters
auditctl(const char *path);
The auditctl() system call directs the kernel to open a new audit trail
log file. auditctl() requires appropriate privilege. In the FreeBSD
implementation, auditctl() opens new files, but auditon() is used to
disable the audit log. In the Mac OS X implementation, passing NULL to
auditctl() will disable the audit log.
auditctl returns 0 on success, or returns -1 on failure, providing
additional error information via errno.
This software was created by McAfee Research, the security research
division of McAfee, Inc., under contract to Apple Computer Inc.
Additional authors include Wayne Salamon, Robert Watson, and SPARTA Inc.
The Basic Security Module (BSM) interface to audit records and audit
event stream format were defined by Sun Microsystems.
This manual page was written by Robert Watson 〈rwatson@FreeBSD.org〉.
The OpenBSM implementation was created by McAfee Research, the security
division of McAfee Inc., under contract to Apple Computer Inc. in 2004.
It was subsequently adopted by the TrustedBSD Project as the foundation
for the OpenBSM distribution.