os/doc
3
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Move "Delegating Audit Review Rights" section to after the review and

Browse source 
reduction sections.  This is the section that introduces the notion of
the audit group.  That way it appears before the section on audit
pipes, which references the audit group.

Obtained from:	TrustedBSD Project
This commit is contained in:
Robert Watson 2006-10-06 09:09:36 +00:00
parent 89abbe6ee8
commit 91d477e93a
Notes: svn2git 2020-12-08 03:00:23 +00:00 
svn path=/head/; revision=28774
1 changed files with 13 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

26
en_US.ISO8859-1/books/handbook/audit/chapter.sgml
View file

@ -598,6 +598,19 @@ trailer,133</programlisting>
<replaceable>AUDITFILE</replaceable> file.</para>
</sect2>
<sect2>
<title>Delegating Audit Review Rights</title>
<para>Members of the <literal>audit</literal> group are given
permission to read audit trails in <filename>/var/audit</filename>;
by default, this group is empty, so only the root user may read
audit trails. Users may be added to the <literal>audit</literal>
group in order to delegate audit review rights to the user. As
the ability to track audit log contents provides significant insight
into the behavior of users and processes, it is recommended that the
delegation of audit review rights be performed with caution.</para>
</sect2>
<sect2>
<title>Live Monitoring Using Audit Pipes</title>
@ -696,18 +709,5 @@ fi</programlisting>
audit trail files are cleanly terminated, so will not be run on
trails left unterminated following an improper shutdown.</para>
</sect2>
<sect2>
<title>Delegating Audit Review Rights</title>
<para>Members of the <literal>audit</literal> group are given
permission to read audit trails in <filename>/var/audit</filename>;
by default, this group is empty, so only the root user may read
audit trails. Users may be added to the <literal>audit</literal>
group in order to delegate audit review rights to the user. As
the ability to track audit log contents provides significant insight
into the behavior of users and processes, it is recommended that the
delegation of audit review rights be performed with caution.</para>
</sect2>
</sect1>
</chapter>