|
# auditd
|
|
|
|
> This responds to requests from the audit utility and notifications from the kernel.
|
|
> It should not be invoked manually.
|
|
|
|
- Start the daemon:
|
|
|
|
`auditd`
|
|
|
|
- Start the daemon in debug mode:
|
|
|
|
`auditd -d`
|
|
|
|
- Start the daemon on-demand from launchd:
|
|
|
|
`auditd -l`
|