audit - audit log interface
This is a special character device that provides an interface
for the audit daemon process, /usr/sbin/auditd, to
the kernel audit buffers. /dev is now a context dependent
symbolic link (CDSL) to /cluster/members/{member}/dev.
This device should be readable only by root, to protect
access by nonsystem processes. The major number assigned
to this device must correlate with the corresponding major
number designation in the system kernel.
/dev/audit
Commands: MAKEDEV(8), auditd(8)
Security
audit(7)
[ Back ] |