NAME
setaudit - manage the system auditing functionality
SYNOPSIS
setaudit enable|disable|archive|delete
setaudit [-p count|suspend] [ -m mailaddr] [-a users=enable|disable|default]
[-c classes= {enable|disable }]... [-e events=enable|disable ]... [-g
{enable|disable }] [-t percents]
setaudit -h
DESCRIPTION
setaudit(8) manages the collection of data on the use of system resources. Audit
data provides a record of security-related system events. This data can be used to
assign responsibility for actions that have taken place on the system. Auditing
generates records when specified events occur. Events that generate audit records
include:
■
■
■
■
You must have auditadm privileges to run this command.
Privileges
Refer to setprivileges(8) for more information.
System startup and shutdown
Login and logout
Authentication actions
Administrative actions
System Administration
setaudit(8)
151