Date: Mon, 29 Jan 2007 16:13:45 GMT From: "Dr. Markus Waldeck"<waldeck@gmx.de> To: freebsd-gnats-submit@FreeBSD.org Subject: docs/108520: man auditreduce vs. FreeBSD Handbook Message-ID: <200701291613.l0TGDjGA021861@www.freebsd.org> Resent-Message-ID: <200701291620.l0TGKLwP069752@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 108520
>Category: docs
>Synopsis: man auditreduce vs. FreeBSD Handbook
>Confidential: no
>Severity: non-critical
>Priority: medium
>Responsible: freebsd-doc
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: doc-bug
>Submitter-Id: current-users
>Arrival-Date: Mon Jan 29 16:20:20 GMT 2007
>Closed-Date:
>Last-Modified:
>Originator: Dr. Markus Waldeck
>Release: 7.0-CURRENT-200701
>Organization:
>Environment:
FreeBSD fbh 7.0-CURRENT-200701 FreeBSD 7.0-CURRENT-200701 #0: Wed Jan 17 20:32:09 UTC 2007
root@fbh:/usr/src/sys/i386/conf/CUSTOM i386
>Description:
The explanation of the auditreduce option "-u" differs between the man page and the handbook.
FreeBSD Hanndbook:
> Since audit logs may be very large, an administrator will likely want to
> select a subset of records for using, such as
> records associated with a specific user:
>
> # auditreduce -u trhodes /var/audit/AUDITFILE | praudit
>
> This will select all audit records produced for the user trhodes stored in
> the AUDITFILE file.
man auditreduce:
-r ruid
Select records with the given real user id or name.
-u auid
Select records with the given audit id.
Which explanation is correct?
>How-To-Repeat:
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200701291613.l0TGDjGA021861>