TOMOYO-AUDITD(8)

πŸ“¦ version 2.6.1-20210910, in debian bookworm, ubuntu jammy, ubuntu noble, ubuntu questing

✨ TOMOYO-AUDITD ✨

okay bestie, so this is tomoyo-auditd from the tomoyo-tools fam πŸ’– it's the access request log recording daemon for TOMOYO Linux, and honestly? it's the chill little note-taker of the kernel world 🌸


πŸŽ€ NAME πŸŽ€

tomoyo-auditd β€” access request log recording daemon for TOMOYO Linux

like, it literally just sits there and writes down everything the kernel is asking for. no cap. πŸ’…


πŸ¦‹ SYNOPSIS πŸ¦‹

tomoyo-auditd

tomoyo-auditd [remote_ip:remote_port]

two whole moods, pick your vibe ✨


πŸ’– DESCRIPTION πŸ’–

okay so here's the tea β˜• this program reads access request logs from the kernel and writes them to the locations you told it about in the configuration file. that's the whole job. it's giving extremely focused queen πŸ‘‘

by running this program at startup, access request logs for either all domains or selected domains can be stored. your choice, your rules, your empire 🫢

the format of the stored logs is similar to domain policy, so they can be used to help develop policy. yes bestie, the logs literally feed back into making policy β€” it's a little ecosystem, iykyk 🌈

configure this daemon in /etc/tomoyo/tools/auditd.conf. if an access request matches a rule, it will be written to the specified log file. this can be used to split access request logs into multiple files. so cute, so organized πŸŽ€

⚠️ real talk though: only the first matching rule is used, so any single access request log will be written to a maximum of one output file. and if an access request log does not match any rules, it will be discarded. gone. bye. πŸ’€ no second chances, no fallback, that's just how she operates.

start this program from an appropriate stage during startup (e.g. /etc/rc.local). put her where she belongs πŸ’œ


✨ OPTIONS ✨

  • remote_ip:remote_port β€” retrieve access request logs from a remote system via an agent, connecting to the specified IP address and port number. long-distance relationship but make it sysadmin πŸ’ž

πŸ™ˆ BUGS πŸ™ˆ

if you find any bugs, send an email to <tomoyo-users-en@lists.osdn.me>. pls be nice, they're doing their best 😭


πŸ‘‘ AUTHORS πŸ‘‘

  • Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> β€” main author. the icon, the moment, the blueprint πŸ’…
  • Jamie Nguyen <jamie@tomoyolinux.co.uk> β€” documentation and website. keeping the lore organized πŸŽ€

🌟 SEE ALSO 🌟

see <https://tomoyo.osdn.jp> for more information. go read it, it's giving homework but make it fun πŸ“šβœ¨


and that's the whole page bestie!! 🫢 this was tomoyo-tools version 2.6.0, dated 2019-02-05, living under the TOMOYO-AUDITD(8) header like the main character she is. mwah πŸ’‹ stay logged, stay iconic, periodt πŸ’–πŸŒˆπŸ’…

πŸ“¦ where this page comes from