Date: Thu, 24 Aug 2006 08:47:12 -0400 From: Wayne Salamon <wsalamon@computer.org> To: R.Tyler Ballance <tyler@bleepsoft.com> Cc: trustedbsd-audit@FreeBSD.org Subject: Re: Darwin work Message-ID: <DA4DE11C-8702-4102-85E2-6407218E185A@computer.org> In-Reply-To: <CF2CAE1F-A9A0-4263-85BA-3D658A635CB2@bleepsoft.com> References: <8C40F149-F305-46DC-A39E-66E26C46822D@bleepsoft.com> <20060815193600.H45647@fledge.watson.org> <B3A55966-EBE6-4A81-B269-976682BE8E16@bleepsoft.com> <20060816132406.Y15941@fledge.watson.org> <CF2CAE1F-A9A0-4263-85BA-3D658A635CB2@bleepsoft.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Aug 23, 2006, at 2:27 PM, R. Tyler Ballance wrote: > Am I looking in the wrong place? Should I be grepping some of the > Xnu source for the Audit related code to find out how to handle the > triggers spewed from Xnu's audit system? Or am i just being too > dense to find the appropriate code in Apple's BSM code ;) The audit daemon handles the Mach triggers. The source is contained in the system_cmds Darwin package, at http://www.opensource.apple.com/darwinsource/10.4.7.ppc/ Wayne ---------------------- Wayne Salamon wsalamon@freebsd.org
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?DA4DE11C-8702-4102-85E2-6407218E185A>