Date: Fri, 7 Oct 2016 16:24:51 +0200 From: Mateusz Piotrowski <0mp@FreeBSD.org> To: freebsd-hackers@freebsd.org Cc: mokhi <mokhi64@gmail.com> Subject: Re: Using Audit Framework and praudit Message-ID: <643DC08B-27A5-49E9-9474-08F0D57FE200@FreeBSD.org> In-Reply-To: <CAByVWPXvQ7%2BHcYEKWTx-60kUqkPaHXRBN_tQod-jo6w0%2B4_RVg@mail.gmail.com> References: <CAByVWPVhrb78=tgHBKf578MO2n3xWQnGeksV9NQtAi%2BLeKmiCA@mail.gmail.com> <EBAB6795-368E-4975-8606-836DC7A067E2@FreeBSD.org> <CAByVWPWWOUrBAnYA5n1kovQZAaaGjP5RQbakH-_QOLqTC7-xdQ@mail.gmail.com> <543F6C07-9472-4B3C-8697-CD5AE1F17725@FreeBSD.org> <CAByVWPXvQ7%2BHcYEKWTx-60kUqkPaHXRBN_tQod-jo6w0%2B4_RVg@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 7 Oct 2016, at 16:05, mokhi <mokhi64@gmail.com> wrote: > My `/etc/security/audit_control` is similar to what you've suggested. > But i can not see nothing when i do `praudit /dev/auditpipe` except > when i do `su` on another terminal tab. Have you tried to restart auditd with `service auditd restart` or rebooting? If you have then I've got no idea what's wrong with your configuration.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?643DC08B-27A5-49E9-9474-08F0D57FE200>