audit(7)audit(7)NAMEaudit - audit log interface
DESCRIPTION
This is a special character device that provides an interface for the
audit daemon process, /usr/sbin/auditd, to the kernel audit buffers.
/dev is now a context dependent symbolic link (CDSL) to /cluster/mem‐
bers/{member}/dev.
RESTRICTIONS
This device should be readable only by root, to protect access by non‐
system processes. The major number assigned to this device must corre‐
late with the corresponding major number designation in the system ker‐
nel.
FILES
/dev/audit
SEE ALSO
Commands: MAKEDEV(8), auditd(8)
Security
audit(7)