Up to higher level directory | |||
Name | Date | Size | |
---|---|---|---|
Android.mk | 06-Aug-2015 | 690 | |
CommandListener.cpp | 06-Aug-2015 | 7.8K | |
CommandListener.h | 06-Aug-2015 | 2K | |
event.logtags | 06-Aug-2015 | 1.2K | |
FlushCommand.cpp | 06-Aug-2015 | 2.7K | |
FlushCommand.h | 06-Aug-2015 | 1.3K | |
libaudit.c | 06-Aug-2015 | 7.6K | |
libaudit.h | 06-Aug-2015 | 2.3K | |
LogAudit.cpp | 06-Aug-2015 | 6.7K | |
LogAudit.h | 06-Aug-2015 | 1.1K | |
LogBuffer.cpp | 06-Aug-2015 | 14.4K | |
LogBuffer.h | 06-Aug-2015 | 2.6K | |
LogBufferElement.cpp | 06-Aug-2015 | 2K | |
LogBufferElement.h | 06-Aug-2015 | 1.7K | |
LogCommand.cpp | 06-Aug-2015 | 3.8K | |
LogCommand.h | 06-Aug-2015 | 927 | |
LogListener.cpp | 06-Aug-2015 | 3.5K | |
LogListener.h | 06-Aug-2015 | 1,018 | |
LogReader.cpp | 06-Aug-2015 | 5.5K | |
LogReader.h | 06-Aug-2015 | 1.1K | |
LogStatistics.cpp | 06-Aug-2015 | 28.3K | |
LogStatistics.h | 06-Aug-2015 | 5.8K | |
LogTimes.cpp | 06-Aug-2015 | 5.5K | |
LogTimes.h | 06-Aug-2015 | 3.3K | |
LogWhiteBlackList.cpp | 06-Aug-2015 | 5.7K | |
LogWhiteBlackList.h | 06-Aug-2015 | 1.8K | |
main.cpp | 06-Aug-2015 | 6K | |
README.auditd | 06-Aug-2015 | 549 | |
README.property | 06-Aug-2015 | 1.7K | |
tests/ | 06-Aug-2015 |
1 Auditd Daemon 2 3 The audit daemon is a simplified version of its desktop 4 counterpart designed to gather the audit logs from the 5 audit kernel subsystem. The audit subsystem of the kernel 6 includes Linux Security Modules (LSM) messages as well. 7 8 To enable the audit subsystem, you must add this to your 9 kernel config: 10 CONFIG_AUDIT=y 11 12 To enable a LSM, you must consult that LSM's documentation, the 13 example below is for SELinux: 14 CONFIG_SECURITY_SELINUX=y 15 16 This does not include possible dependencies that may need to be 17 satisfied for that particular LSM. 18
1 The properties that logd responds to are: 2 3 name type default description 4 logd.auditd bool true Enable selinux audit daemon 5 logd.auditd.dmesg bool true selinux audit messages duplicated and 6 sent on to dmesg log 7 logd.statistics bool depends Enable logcat -S statistics. 8 ro.config.low_ram bool false if true, logd.statistics default false 9 ro.build.type string if user, logd.statistics default false 10 logd.statistics.dgram_qlen bool false Record dgram_qlen statistics. This 11 represents a performance impact and 12 is used to determine the platform's 13 minimum domain socket network FIFO 14 size (see source for details) based 15 on typical load (logcat -S to view) 16 persist.logd.size number 256K default size of the buffer for all 17 log ids at initial startup, at runtime 18 use: logcat -b all -G <value> 19 persist.logd.size.main number 256K Size of the buffer for the main log 20 persist.logd.size.system number 256K Size of the buffer for the system log 21 persist.logd.size.radio number 256K Size of the buffer for the radio log 22 persist.logd.size.event number 256K Size of the buffer for the event log 23 persist.logd.size.crash number 256K Size of the buffer for the crash log 24 25 NB: 26 - number support multipliers (K or M) for convenience. Range is limited 27 to between 64K and 256M for log buffer sizes. Individual logs override the 28 global default. 29