NAME

audit − audit log interface

DESCRIPTION

This is a special character device that provides an interface for the audit daemon process, /usr/sbin/auditd, to the kernel audit buffers.  /dev is now a context dependent symbolic link (CDSL) to /cluster/members/{member}/dev. 

RESTRICTIONS

This device should be readable only by root, to protect access by nonsystem processes. The major number assigned to this device must correlate with the corresponding major number designation in the system kernel. 

FILES

/dev/audit

SEE ALSO

Commands: MAKEDEV(8), auditd(8)

Security