tldr/pages/common/auditd.md

318 B

auditd

This responds to requests from the audit utility and notifications from the kernel. It should not be invoked manually. More information: https://manned.org/auditd.

  • Start the daemon:

auditd

  • Start the daemon in debug mode:

auditd -d

  • Start the daemon on-demand from launchd:

auditd -l