ccs-auditd8
Tomoyo linux's auditing daemon
Usage
ccs-auditd location_to_save_grant_log
location_to_save_reject_log
[remote_ip:remote_port]
Overview
This program reads access request logs from kernel and writes to specified location.
By running this program upon startup, you can save access logs which violated domain_policy (reject_log) and access logs which didn't violate domain_policy (grant_log) in domain_policy file's format.
You may specify /dev/null as location to save logs. But in that case, you should set PREFERENCE::audit={ max_grant_log=0 } and/or PREFERENCE::audit={ max_reject_log=0 } in profile configuration ( /etc/ccs/profile.conf or /proc/ccs/profile ).
- remote_ip:remote_port
-
Get process information via agent listening at specified IP address and port number.
Examples
# ccs-auditd /dev/null /var/log/tomoyo/reject_log.txt
Notes
Start this program from appropriate stage such as /etc/rc.local .
Releases
2 releases since Debian 5.0 (Lenny); the text changed 1 time.