Darwin work

R. Tyler Ballance tyler at bleepsoft.com
Thu Aug 24 19:52:13 UTC 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Aug 24, 2006, at 7:47 AM, Wayne Salamon wrote:

>
> On Aug 23, 2006, at 2:27 PM, R. Tyler Ballance wrote:
>
>> Am I looking in the wrong place? Should I be grepping some of the  
>> Xnu source for the Audit related code to find out how to handle  
>> the triggers spewed from Xnu's audit system? Or am i just being  
>> too dense to find the appropriate code in Apple's BSM code ;)
>
> The audit daemon handles the Mach triggers. The source is contained  
> in the system_cmds Darwin package, at
> http://www.opensource.apple.com/darwinsource/10.4.7.ppc/

Ahck! Whoops, I had forgotten that Apple has a bunch of those smaller  
daemons packed away into the system_cmds package on the darwin source  
site.

Thanks for the correction, I wasn't thinking properly yesterday it  
seems :)

Cheers,

- -R. Tyler Ballance

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)

iD8DBQFE7gNXqO6nEJfroRsRAu96AJ9S+EY8mBbFW/g/QvLC3whRDrkvYACeJqYo
deJb/jnvzRcxbnQbugqQXFY=
=kLSS
-----END PGP SIGNATURE-----


More information about the trustedbsd-audit mailing list