freebsd-skq/etc/rc.d/auditd
Pawel Jakub Dawidek e3bf08680d Add 'nojail' keyword as auditd(8) can't really do anything useful when
inside a jail.

Discussed with:	rwatson
MFC after:	1 week
2012-01-06 14:00:31 +00:00

33 lines
521 B
Bash
Executable File

#!/bin/sh
#
# $FreeBSD$
#
# Start up for the Audit daemon.
#
# PROVIDE: auditd
# REQUIRE: syslogd
# BEFORE: DAEMON
# KEYWORD: nojail shutdown
. /etc/rc.subr
name="auditd"
stop_cmd="auditd_stop"
command="/usr/sbin/${name}"
rcvar="auditd_enable"
command_args="${auditd_flags}"
required_files="/etc/security/audit_class /etc/security/audit_control
/etc/security/audit_event /etc/security/audit_user
/etc/security/audit_warn"
auditd_stop()
{
/usr/sbin/audit -t
sleep 1
}
load_rc_config $name
run_rc_command "$1"