Darwin work
R. Tyler Ballance
tyler at bleepsoft.com
Thu Aug 24 19:52:13 UTC 2006
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Aug 24, 2006, at 7:47 AM, Wayne Salamon wrote:
>
> On Aug 23, 2006, at 2:27 PM, R. Tyler Ballance wrote:
>
>> Am I looking in the wrong place? Should I be grepping some of the
>> Xnu source for the Audit related code to find out how to handle
>> the triggers spewed from Xnu's audit system? Or am i just being
>> too dense to find the appropriate code in Apple's BSM code ;)
>
> The audit daemon handles the Mach triggers. The source is contained
> in the system_cmds Darwin package, at
> http://www.opensource.apple.com/darwinsource/10.4.7.ppc/
Ahck! Whoops, I had forgotten that Apple has a bunch of those smaller
daemons packed away into the system_cmds package on the darwin source
site.
Thanks for the correction, I wasn't thinking properly yesterday it
seems :)
Cheers,
- -R. Tyler Ballance
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)
iD8DBQFE7gNXqO6nEJfroRsRAu96AJ9S+EY8mBbFW/g/QvLC3whRDrkvYACeJqYo
deJb/jnvzRcxbnQbugqQXFY=
=kLSS
-----END PGP SIGNATURE-----
More information about the trustedbsd-audit
mailing list