GayBSD documentation tree
43b8eb7340
Rename section "Security Event Auditing" from "Kernel Event Auditing" -- while most of our events are currently generated by the kernel, the intent is that it will be whole system auditing. More carefully distinguish our implementation being based on Sun's published API and file format, and not their implementation. Clarify a few more things audit can be used for, including post-mortem analysis and intrusion detection. Mention Mac OS X compatibility in addition to Darwin. Sort glossary slightly differently -- events before classes, since classes are defined in terms of events. Tweak definition and examples. Mention non-attributable vs attributable here. Mention that classes allow administrators to specify auditing requirements at a high level. Describe contents of a record. Define 'trail'. Since audit is now part of the base system, remove directions for installing files, etc, since complete installs should have them, and if they don't, the user should seek support. Mention that audit trails are happiest on a file system of their own. Update example flags option in audit_control -- add information on the new default, but keep the current example because the new default doesn't reflect the scope of possible expressions, whereas the earlier example did. Rephrase paragraph on avoiding directly manipulating logs in order to explain that this is because the kernel/daemon own the log until it is terminated. Correct example: auditreduce just reduces, not prints, so |praudit is needed or the user will experience the power of raw BSM's effects on his or her terminal. Much suggested by: brueffer Reviewed by: brueffer |
||
|---|---|---|
| bn_BD.ISO10646-1 | ||
| da_DK.ISO8859-1 | ||
| de_DE.ISO8859-1 | ||
| el_GR.ISO8859-7 | ||
| en/handbook/contrib | ||
| en_US.ISO8859-1 | ||
| es_ES.ISO8859-1 | ||
| fr_FR.ISO8859-1 | ||
| it_IT.ISO8859-15 | ||
| ja_JP.eucJP | ||
| nl_NL.ISO8859-1 | ||
| no_NO.ISO8859-1 | ||
| pl_PL.ISO8859-2 | ||
| pt_BR.ISO8859-1 | ||
| release | ||
| ru_RU.KOI8-R | ||
| share | ||
| sr_YU.ISO8859-2 | ||
| tr_TR.ISO8859-9 | ||
| zh/FAQ | ||
| zh_CN.GB2312 | ||
| zh_TW.Big5 | ||
| Makefile | ||
| README | ||
$FreeBSD$
If you plan on building a local copy of the FreeBSD documentation, or using
our toolchain in your own projects, please read
http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/fdp-primer/
for information about the tools and formatting languages we use. Chapter
2 covers the software and related items you will need to install.