setaudit8
Specify audit configurations on a process
Usage
setaudit [-46U]
[-a
auid]
[-m
mask]
[-s
source]
[-p
port]
command ...
Overview
setaudit is a tool to specify audit configurations on a process.
The following options are available:
-
-4 -
Use IPv4.
-
-6 -
Use IPv6.
-
-U -
Update audit session state rather than overwriting it. By default,
setauditwill overwrite the entire audit session state using the specified parameters. If-Uis specified, only the parameters given on the command line will be updated, leaving the rest unchanged. -
-a auid -
Audit user ID or user name.
-
-m mask -
String representation of an audit mask.
-
-s source -
IPv4 or IPv6 address of a Terminal ID.
-
-p port -
Port of a Terminal ID.
Examples
Enable all exe related audit events performed by command and its child processes:
# setaudit -m ex command
Releases
Unchanged in 2 releases since FreeBSD 15.1-RELEASE.