From b6357224cac51e2e32b94790bba2cb8d9d13e8d7 Mon Sep 17 00:00:00 2001 From: Robert Watson Date: Sun, 28 Apr 2019 16:28:36 +0000 Subject: [PATCH] Update the audit(4) man page to talk about dtaudit(4), and also add a dtaudit(4) cross reference to auditpipe(4). MFC after: 3 days Sponsored by: DARPA, AFRL --- share/man/man4/audit.4 | 16 ++++++++++++++-- share/man/man4/auditpipe.4 | 3 ++- 2 files changed, 16 insertions(+), 3 deletions(-) diff --git a/share/man/man4/audit.4 b/share/man/man4/audit.4 index 0096dded414a..f8430edf348b 100644 --- a/share/man/man4/audit.4 +++ b/share/man/man4/audit.4 @@ -1,6 +1,11 @@ -.\" Copyright (c) 2006 Robert N. M. Watson +.\" Copyright (c) 2006, 2019 Robert N. M. Watson .\" All rights reserved. .\" +.\" This software was developed in part by BAE Systems, the University of +.\" Cambridge Computer Laboratory, and Memorial University under DARPA/AFRL +.\" contract FA8650-15-C-7558 ("CADETS"), as part of the DARPA Transparent +.\" Computing (TC) research program. +.\" .\" Redistribution and use in source and binary forms, with or without .\" modification, are permitted provided that the following conditions .\" are met: @@ -24,7 +29,7 @@ .\" .\" $FreeBSD$ .\" -.Dd May 31, 2009 +.Dd April 28, 2019 .Dt AUDIT 4 .Os .Sh NAME @@ -74,6 +79,12 @@ Audit pipe special devices, discussed in provide a configurable live tracking mechanism to allow applications to tee the audit trail, as well as to configure custom preselection parameters to track users and events in a fine-grained manner. +.Ss DTrace Audit Provider +The DTrace Audit Provider, +.Xr dtaudit 4 , +allows D scripts to enable capture of in-kernel audit records for kernel audit +event types, and then process their contents during audit commit or BSM +generation. .Sh SEE ALSO .Xr auditreduce 1 , .Xr praudit 1 , @@ -88,6 +99,7 @@ to track users and events in a fine-grained manner. .Xr setauid 2 , .Xr libbsm 3 , .Xr auditpipe 4 , +.Xr dtaudit 4 , .Xr audit.log 5 , .Xr audit_class 5 , .Xr audit_control 5 , diff --git a/share/man/man4/auditpipe.4 b/share/man/man4/auditpipe.4 index 971694869528..7dc9cdaff509 100644 --- a/share/man/man4/auditpipe.4 +++ b/share/man/man4/auditpipe.4 @@ -24,7 +24,7 @@ .\" .\" $FreeBSD$ .\" -.Dd May 30, 2018 +.Dd April 28, 2019 .Dt AUDITPIPE 4 .Os .Sh NAME @@ -221,6 +221,7 @@ to review the default audit trail. .Xr poll 2 , .Xr select 2 , .Xr audit 4 , +.Xr dtaudit 4 , .Xr audit_control 5 , .Xr audit 8 , .Xr auditd 8