CCS-AUDITD

Section: System Administration Utilities (8) Updated: May 2010 Local index Up

NAME

ccs-auditd - TOMOYO Linux's auditing daemon

SYNOPSIS

ccs-auditd location_to_save_grant_log location_to_save_reject_log [remote_ip:remote_port]

DESCRIPTION

This program reads access request logs from kernel and writes to specified location.

By running this program upon startup, you can save access logs which violated domain_policy (reject_log) and access logs which didn't violate domain_policy (grant_log) in domain_policy file's format.

You may specify /dev/null as location to save logs. But in that case, you should set PREFERENCE::audit={ max_grant_log=0 } and/or PREFERENCE::audit={ max_reject_log=0 } in profile configuration ( /etc/ccs/profile.conf or /proc/ccs/profile ).

remote_ip:remote_port: Get process information via agent listening at specified IP address and port number.

EXAMPLES

# ccs-auditd /dev/null /var/log/tomoyo/reject_log.txt

NOTES

Start this program from appropriate stage such as /etc/rc.local .

AUTHORS

penguin-kernel _at_ I-love.SAKURA.ne.jp

COPYRIGHT

This program is free software; you may redistribute it under the terms of the GNU General Public License. This program has absolutely no warranty.

This document was created by man2html, using the manual pages.
Time: 22:01:23 GMT, April 16, 2011