SETAUDIT(8)

🦋 setaudit — specify audit configurations on a process 🦋

okay so bestie, welcome to SETAUDIT(8), straight from the System Manager's Manual. This is your group-chat crash course in setaudit, and we're keeping every detail, no cap. 💅

🌸 NAME 🌸

setaudit — specify audit configurations on a process. That's the whole vibe.

✨ SYNOPSIS ✨

setaudit [-46U] [-a auid] [-m mask] [-s source] [-p port] command ...

💖 DESCRIPTION 💖

okay so setaudit is literally a tool to specify audit configurations on a process. main character energy for audit session setup, fr fr.

The following options are available — read them like a group chat, bestie:

• -4 — Use IPv4. simple, iconic.
• -6 — Use IPv6. the other IP flavor, slay.
• -U — Update audit session state rather than overwriting it. By default, setaudit will overwrite the entire audit session state using the specified parameters. If -U is specified, only the parameters given on the command line will be updated, leaving the rest unchanged. so it's giving “surgical update” vs “full overwrite” vibes.
• -a auid — Audit user ID or user name. yes bestie, either one.
• -m mask — String representation of an audit mask. string representation, not a vibe, okay?
• -s source — IPv4 or IPv6 address of a Terminal ID. terminal ID address, got it.
• -p port — Port of a Terminal ID. the port part of the Terminal ID situation.

🍓 EXAMPLES 🍓

Enable all exe related audit events performed by command and its child processes:

# setaudit -m ex command

🧚 SEE ALSO 🧚

• getaudit(2)
• setaudit(2)
• au_mask(3)
• libbsm(3)
• audit_user(5)
• audit(8)

👑 HISTORY 👑

The setaudit utility was written by Christian S.J. Peron <csjp@FreeBSD.org>. iconic authorship moment.

💜 AUTHORS 💜

This manual page was written by Mateusz Piotrowski <0mp@FreeBSD.org>. we stan a documentation author.

---

okay that's the page, bestie 🫶 — brought to you by Debian, dated March 21, 2018, with SETAUDIT(8) on the footer. periodt 💅