Standards, Environments, and Macros              auditbinfile(5)



NAME
     auditbinfile - generation of Solaris audit logs

SYNOPSIS
     /usr/lib/security/auditbinfile.so


DESCRIPTION
     The  auditbinfile  plugin   module   for   Solaris   audit,
     /usr/lib/security/auditbinfile.so, writes binary audit data
     to files  as  configured  in  auditcontrol(4);  it  is  the
     default  plugin for the Solaris audit daemon auditd(1M). Its
     output is described by audit.log(4).


     The  auditbinfile   plugin   is   loaded   by   auditd   if
     auditcontrol  contains  one  or  more  lines defining audit
     directories  by  means  of  the  dir:  specification  or  if
     auditcontrol     has    a    plugin:    specification    of
     name=auditbinfile.so.

OBJECT ATRIBUTES
     The pdir and pminfree attributes  are  equivalent  to  the
     dir:  and minfree: lines described in auditcontrol. If both
     the dir: line and the pdir attribute are used,  the  plugin
     combines  all  directories  into  a  single  list with those
     specified by means of dir: at the front of the list. If both
     the  minfree  and  the  pminfree  attributes are given, the
     pminfree value is used.


     The pfsize attribute defines the maximum size in bytes that
     an  audit  file can become before it is automatically closed
     and a new audit  file  opened.  This  is  equivalent  to  an
     administrator  issuing  an  audit  -n command when the audit
     file contains the specified number  of  bytes.  The  default
     size  is  zero  (0),  which  allows the file to grow without
     bound. The value specified  must  be  within  the  range  of
     [512,000, 2,147,483,647].

EXAMPLES
     The  following  directives  cause  auditbinfile.so  to   be
     loaded,  specify the directories for writing audit logs, and
     specify the percentage of required free space per directory.

       flags: lo,ad,-fm
       naflags: lo,ad
       plugin: name=auditbinfile.so;\
       pminfree=20;\
       pdir=/etc/security/jedgar/eggplant,\
       /etc/security/jedgar.aux/eggplant,\
       /etc/security/global/eggplant



SunOS 5.11          Last change: 25 Sep 2008                    1






Standards, Environments, and Macros              auditbinfile(5)



ATRIBUTES
     See attributes(5) for a description of the following  attri-
     butes:



     
           ATRIBUTE TYPE               ATRIBUTE VALUE       
    
     MT Level                     MT-Safe                     
    
     Interface Stability          Committed                   
    


SEE ALSO
     auditd(1M), auditcontrol(4), syslog.conf(4), attributes(5)


     System Administration Guide: Security Services



































SunOS 5.11          Last change: 25 Sep 2008                    2