Attributes
stostrategy {save | wrap}
The audit trail storage strategy of the daemon. This attribute defines what the daemon does if the audit trail storage is full. Its
possible values are
save
If the specified trail size limit is reached (the default is 2 MB), auditd saves the current trail file to a new file (this file has the same name as the original
trail file, with the date and time appended). auditd then deletes the contents of the original trail file, and continues auditing from the beginning of this file. This is the default value
for stostrategy.
wrap
The daemon overwrites the old audit trails.
state {enabled | disabled}
Tells whether the audit daemon is accepting audit log requests or not. The values are enabled or disabled. The default value for
state is enabled.
See the OSF DCE Administration Guide - Core Components for more information about audit attributes.