svcadm(1M)을 검색하려면 섹션에서 1M 을 선택하고, 맨 페이지 이름에 svcadm을 입력하고 검색을 누른다.
audit(8)
System Administration Commands audit(8)
NAME
audit - control the behavior of the audit service
SYNOPSIS
audit -n | -s | -t | -v
DESCRIPTION
The audit command is the system administrator's interface to start,
terminate, and refresh the audit service, auditd(8). Refreshing the
audit service rereads the service and plugin configuration.
OPTIONS
-n Notify the audit service audit_binfile(7) plugin to close the
current audit file and open a new audit file in the current audit
directory.
audit_remote(7) is notified to close the current open connection
which inherently means that the audit remote server will close
the related audit file. audit_remote(7) attempts to establish a
new connection with the same host, thus open a new audit file.
-s Start (enable) the audit service if it is not running, or refresh
the audit service, if it is currently running.
-t Terminate (disable) the audit service. The audit service will
close out the active plugins, stop auditing and exit. Use -s to
restart auditing.
-v Verify that at least one plugin is active or audit remote server
is enabled. Verify attributes of plugins and audit remote server
ars(7) configuration.
DIAGNOSTICS
The audit command will exit with 0 upon success and a positive integer
upon failure.
ATTRIBUTES
See attributes(7) for descriptions of the following attributes:
tab() box; cw(2.75i) |cw(2.75i) lw(2.75i) |lw(2.75i) ATTRIBUTE TYPEAT‐
TRIBUTE VALUE _ Availabilitysystem/core-os _ Interface StabilityCommit‐
ted
SEE ALSO
ars(7), attributes(7), audit_binfile(7), auditconfig(8), auditd(8)
Managing Auditing in Oracle Solaris 11.4
NOTES
The audit command does not modify a process's preselection mask. Its
functions are limited to performing control actions of the auditing
subsystem. See auditconfig(8) for configuration.
The -s option validates the audit plugin configuration. If it is not
valid an error message is displayed and the audit service is not
started or refreshed. The -v option may be used to validate the audit
plugin configuration before using the -s option to start or refresh the
audit service.
The -s option also checks state of the audit service. In case the audit
service is found in the maintenance state (thus not able to be enabled
or refreshed) the audit command returns with an appropriate message and
exit code.
The audit command is available to administrators who have the Audit
Control Rights Profile.
All options are valid in the global zone. In a non-global zone, if per‐
zone policy is disabled and the audit remote server is not enabled,
only the -v option is valid. See auditconfig(8) for per-zone audit con‐
figuration.
HISTORY
The -v option was added in Solaris 10 3/05.
The audit command was added in Solaris 2.3.
Oracle Solaris 11.4 21 Jun 2021 audit(8)