tldr/pages/common/auditd.md

17 lines
269 B
Markdown

# auditd
> This responds to requests from the audit utility and notifications from the kernel.
> It should not be invoked manually.
- Start the daemon:
`auditd`
- Start the daemon in debug mode:
`auditd -d`
- Start the daemon on-demand from launchd:
`auditd -l`