10696600cSBjoern A. Zeeb#!/bin/sh 20696600cSBjoern A. Zeeb# 30696600cSBjoern A. Zeeb# 40696600cSBjoern A. Zeeb# Start up for the Audit daemon. 50696600cSBjoern A. Zeeb# 60696600cSBjoern A. Zeeb 70696600cSBjoern A. Zeeb# PROVIDE: auditd 80696600cSBjoern A. Zeeb# REQUIRE: syslogd 90696600cSBjoern A. Zeeb# BEFORE: DAEMON 100696600cSBjoern A. Zeeb# KEYWORD: nojail shutdown 110696600cSBjoern A. Zeeb 120696600cSBjoern A. Zeeb. /etc/rc.subr 130696600cSBjoern A. Zeeb 140696600cSBjoern A. Zeebname="auditd" 150696600cSBjoern A. Zeebdesc="Audit daemon" 160696600cSBjoern A. Zeebstop_cmd="auditd_stop" 170696600cSBjoern A. Zeebcommand="/usr/sbin/${name}" 18bcc5b244SAlex Richardsonpidfile="/var/run/${name}.pid" 190696600cSBjoern A. Zeebrcvar="auditd_enable" 200696600cSBjoern A. Zeebcommand_args="${auditd_flags}" 210696600cSBjoern A. Zeebrequired_files="/etc/security/audit_class /etc/security/audit_control 220696600cSBjoern A. Zeeb /etc/security/audit_event /etc/security/audit_user 230696600cSBjoern A. Zeeb /etc/security/audit_warn" 240696600cSBjoern A. Zeeb 250696600cSBjoern A. Zeebauditd_stop() 260696600cSBjoern A. Zeeb{ 270696600cSBjoern A. Zeeb 280696600cSBjoern A. Zeeb /usr/sbin/audit -t 2928c0abceSRyan Libby if [ -n "$rc_pid" ]; then 3028c0abceSRyan Libby wait_for_pids $rc_pid 3128c0abceSRyan Libby fi 320696600cSBjoern A. Zeeb} 330696600cSBjoern A. Zeeb 340696600cSBjoern A. Zeebload_rc_config $name 35*f99f0ee1SAlexander Leidinger 36*f99f0ee1SAlexander Leidinger# doesn't make sense to run in a svcj: nojail keyword 37*f99f0ee1SAlexander Leidingerauditd_svcj="NO" 38*f99f0ee1SAlexander Leidinger 390696600cSBjoern A. Zeebrun_rc_command "$1" 40