17.3. Installing Audit Support

User space support for Event Auditing is installed as part of the base FreeBSD operating system as of 6.2-RELEASE. However, Event Auditing support must be explicitly compiled into the kernel by adding the following lines to the kernel configuration file:

options    AUDIT

Rebuild and reinstall the kernel via the normal process explained in Rozdział 8.

Once the kernel is built, installed, and the system has been rebooted, enable the audit daemon by adding the following line to rc.conf(5):


Audit support must then be started by a reboot, or by manually starting the audit daemon:

/etc/rc.d/auditd start

Ten i inne dokumenty można pobrać z ftp://ftp.FreeBSD.org/pub/FreeBSD/doc/.

W przypadku pytań o FreeBSD prosimy przeczytać dostępną dokumentację przed kontaktem z <questions@FreeBSD.org>.
W sprawie zapytań o tę dokumentację prosimy o kontakt z <doc@FreeBSD.org>.