Configuring auditing

Displaying audit criteria

The auditset command invoked with no options displays the system and user-level criteria. The following example illustrates the output of auditset.

# auditset System Audit Criteria: add_grp add_usr add_usr_grp audit_buf audit_ctl audit_dmp audit_evt audit_log audit_map date init mod_grp mod_usr

User Audit Criteria: aeb (201): create link mk_node sym_create unlink dhh (225): link mk_dir rm_dir sym_create unlink root (0): none wts (251): all

To display selected audit criteria, use the -d option of auditset. When the -d option is used alone, auditset reports only the system- wide audit criteria. For example:

   # auditset -d

   System Audit Criteria:
   	add_grp add_usr add_usr_grp audit_buf audit_ctl
   audit_dmp audit_evt audit_log audit_map date init mod_grp
   mod_usr

You may combine the -d option of auditset with the -a or -u option to display the system-wide audit criteria and the user audit criteria for all or specified active users.