Up to higher level directory | |||
Name | Date | Size | |
---|---|---|---|
Android.mk | 08-Oct-2015 | 1.4K | |
CommandListener.cpp | 08-Oct-2015 | 8.2K | |
CommandListener.h | 08-Oct-2015 | 2.3K | |
event.logtags | 08-Oct-2015 | 1.2K | |
FlushCommand.cpp | 08-Oct-2015 | 2.7K | |
FlushCommand.h | 08-Oct-2015 | 1.3K | |
libaudit.c | 08-Oct-2015 | 7.6K | |
libaudit.h | 08-Oct-2015 | 2.3K | |
LogAudit.cpp | 08-Oct-2015 | 7.2K | |
LogAudit.h | 08-Oct-2015 | 1.1K | |
LogBuffer.cpp | 08-Oct-2015 | 18.7K | |
LogBuffer.h | 08-Oct-2015 | 2.8K | |
LogBufferElement.cpp | 08-Oct-2015 | 6.3K | |
LogBufferElement.h | 08-Oct-2015 | 3.3K | |
LogCommand.cpp | 08-Oct-2015 | 3.8K | |
LogCommand.h | 08-Oct-2015 | 927 | |
LogKlog.cpp | 08-Oct-2015 | 17K | |
LogKlog.h | 08-Oct-2015 | 1.8K | |
LogListener.cpp | 08-Oct-2015 | 3.5K | |
LogListener.h | 08-Oct-2015 | 1,018 | |
logpersist | 08-Oct-2015 | 898 | |
LogReader.cpp | 08-Oct-2015 | 5.6K | |
LogReader.h | 08-Oct-2015 | 1.1K | |
LogStatistics.cpp | 08-Oct-2015 | 15.7K | |
LogStatistics.h | 08-Oct-2015 | 9.3K | |
LogTimes.cpp | 08-Oct-2015 | 6.1K | |
LogTimes.h | 08-Oct-2015 | 3.4K | |
LogWhiteBlackList.cpp | 08-Oct-2015 | 5.8K | |
LogWhiteBlackList.h | 08-Oct-2015 | 1.9K | |
main.cpp | 08-Oct-2015 | 12.9K | |
README.auditd | 08-Oct-2015 | 549 | |
README.property | 08-Oct-2015 | 1.6K | |
tests/ | 08-Oct-2015 |
1 Auditd Daemon 2 3 The audit daemon is a simplified version of its desktop 4 counterpart designed to gather the audit logs from the 5 audit kernel subsystem. The audit subsystem of the kernel 6 includes Linux Security Modules (LSM) messages as well. 7 8 To enable the audit subsystem, you must add this to your 9 kernel config: 10 CONFIG_AUDIT=y 11 12 To enable a LSM, you must consult that LSM's documentation, the 13 example below is for SELinux: 14 CONFIG_SECURITY_SELINUX=y 15 16 This does not include possible dependencies that may need to be 17 satisfied for that particular LSM. 18
1 The properties that logd responds to are: 2 3 name type default description 4 logd.auditd bool true Enable selinux audit daemon 5 logd.auditd.dmesg bool true selinux audit messages duplicated and 6 sent on to dmesg log 7 logd.klogd bool depends Enable klogd daemon 8 logd.statistics bool depends Enable logcat -S statistics. 9 ro.config.low_ram bool false if true, logd.statistics & logd.klogd 10 default false 11 ro.build.type string if user, logd.statistics & logd.klogd 12 default false 13 persist.logd.logpersistd string Enable logpersist daemon, "logcatd" 14 turns on logcat -f in logd context 15 persist.logd.size number 256K default size of the buffer for all 16 log ids at initial startup, at runtime 17 use: logcat -b all -G <value> 18 persist.logd.size.main number 256K Size of the buffer for the main log 19 persist.logd.size.system number 256K Size of the buffer for the system log 20 persist.logd.size.radio number 256K Size of the buffer for the radio log 21 persist.logd.size.event number 256K Size of the buffer for the event log 22 persist.logd.size.crash number 256K Size of the buffer for the crash log 23 24 NB: 25 - number support multipliers (K or M) for convenience. Range is limited 26 to between 64K and 256M for log buffer sizes. Individual logs override the 27 global default. 28