Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 24 Aug 2006 08:47:12 -0400
From:      Wayne Salamon <wsalamon@computer.org>
To:        R.Tyler Ballance <tyler@bleepsoft.com>
Cc:        trustedbsd-audit@FreeBSD.org
Subject:   Re: Darwin work
Message-ID:  <DA4DE11C-8702-4102-85E2-6407218E185A@computer.org>
In-Reply-To: <CF2CAE1F-A9A0-4263-85BA-3D658A635CB2@bleepsoft.com>
References:  <8C40F149-F305-46DC-A39E-66E26C46822D@bleepsoft.com> <20060815193600.H45647@fledge.watson.org> <B3A55966-EBE6-4A81-B269-976682BE8E16@bleepsoft.com> <20060816132406.Y15941@fledge.watson.org> <CF2CAE1F-A9A0-4263-85BA-3D658A635CB2@bleepsoft.com>

next in thread | previous in thread | raw e-mail | index | archive | help

On Aug 23, 2006, at 2:27 PM, R. Tyler Ballance wrote:

> Am I looking in the wrong place? Should I be grepping some of the  
> Xnu source for the Audit related code to find out how to handle the  
> triggers spewed from Xnu's audit system? Or am i just being too  
> dense to find the appropriate code in Apple's BSM code ;)

The audit daemon handles the Mach triggers. The source is contained  
in the system_cmds Darwin package, at
http://www.opensource.apple.com/darwinsource/10.4.7.ppc/

Wayne
----------------------
Wayne Salamon
wsalamon@freebsd.org






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?DA4DE11C-8702-4102-85E2-6407218E185A>