[Fed-Talk] Re: current BSM audit trail file?
[Fed-Talk] Re: current BSM audit trail file?
- Subject: [Fed-Talk] Re: current BSM audit trail file?
- From: "Dan O'Donnell" <email@hidden>
- Date: Thu, 16 Aug 2007 12:07:45 -0700
- Thread-topic: current BSM audit trail file?
/var/audit/
On 8/16/07 12:04 PM, "email@hidden"
<email@hidden> wrote:
> Date: Thu, 16 Aug 2007 10:54:49 -0700
> From: Todd Heberlein <email@hidden>
> Subject: [Fed-Talk] current BSM audit trail file?
> To: FedTalk List <email@hidden>
> Message-ID: <email@hidden>
> Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
>
> Does anyone know how (or if it is possible) to automatically identify
> the name/path of the current BSM audit trail file on Mac OS X?
>
> Sun's SunSHIELD documentation (Feb 2000) mentions the file /etc/
> security/audit_data includes the PID of the audit daemon and the
> current audit trail file being used, but Apple doesn't seem to
> support this.
--------------------
This email message is for the sole use of the intended recipient(s) and
may contain privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply email and destroy all copies
of the original message.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden