Setting auditing parameters

Settable parameters for auditing are found in the /etc/default/audit file. This file contains the following parameters:

AUDIT_LOGERR

The value of this parameter controls the action taken if there is any error involving the auditing subsystem.

AUDIT_LOGFULL

The value of this parameter controls the action taken when the audit event log file becomes full.

AUDIT_PGM

This parameter defines the absolute path name to an executable file that will be executed every time a switch to a different log file occurs.

AUDIT_DEFPATH

This parameter defines the absolute path name of the directory for the audit event log files. The value for this parameter upon initial installation is /var/audit.

AUDIT_NODE

This parameter defines the node name to be appended to the system generated audit event log file name.