Robert Watson deea362c80 The kernel DTrace audit provider (dtaudit) relies on auditd(8) to load ... /etc/security/audit_event to provide a list of audit event-number <-> name mappings. However, this occurs too late for anonymous tracing. With this change, adding 'audit_event_load="YES"' to /boot/loader.conf will cause the boot loader to preload the file, and then the kernel audit code will parse it to register an initial set of audit event-number <-> name mappings. Those mappings can later be updated by auditd(8) if the configuration file changes. Reviewed by: gnn, asomers, markj, allanjude Discussed with: jhb Approved by: re (kib) MFC after: 1 week Sponsored by: DARPA, AFRL Differential Revision: https://reviews.freebsd.org/D16589		2018-09-03 14:26:43 +00:00
..
loader.conf	The kernel DTrace audit provider (dtaudit) relies on auditd(8) to load	2018-09-03 14:26:43 +00:00
loader.conf.5	Document the cpu_microcode_* tunables.	2018-08-28 17:14:46 +00:00
Makefile	These two directories build man pages, so it's incorrect to tag them	2018-02-26 15:41:20 +00:00