---
name: "ccs-auditd"
section: "8"
platform: "linux"
package: "tomoyo-ccstools1.7"
version: "1.7.2-20100401-3"
release: "Debian 6.0 (Squeeze)"
platforms: ["linux"]
url: "https://new.carta.tech/ccs-auditd"
---

# ccs-auditd(8)

TOMOYO Linux's auditing daemon

## NAME

ccs-auditd - TOMOYO Linux's auditing daemon

## SYNOPSIS

**ccs-auditd** *location\_to\_save\_grant\_log location\_to\_save\_reject\_log* \[*remote\_ip:remote\_port*\]

## DESCRIPTION

This program reads access request logs from kernel and writes to specified location.

By running this program upon startup, you can save access logs which violated domain\_policy (reject\_log) and access logs which didn't violate domain\_policy (grant\_log) in domain\_policy file's format.

You may specify /dev/null as location to save logs. But in that case, you should set PREFERENCE::audit={ max\_grant\_log=0 } and/or PREFERENCE::audit={ max\_reject\_log=0 } in profile configuration ( /etc/ccs/profile.conf or /proc/ccs/profile ).

- remote\_ip:remote\_port

  Get process information via agent listening at specified IP address and port number.

## EXAMPLES

\# ccs-auditd /dev/null /var/log/tomoyo/reject\_log.txt

## NOTES

 Start this program from appropriate stage such as /etc/rc.local .

## AUTHORS

 penguin-kernel \_at\_ I-love.SAKURA.ne.jp

## COPYRIGHT

Copyright © 2005-2010 NTT DATA CORPORATION.

This program is free software; you may redistribute it under the terms of the GNU General Public License. This program has absolutely no warranty.

## SEE ALSO

 ccs-editpolicy-agent (8)