This document is a Mac OS X manual page. Manual pages are a command-line technology for providing documentation. You can view these manual pages locally using the man(1) command. These manual pages come from many different sources, and thus, have a variety of writing styles.

This manual page is associated with the Mac OS X developer tools. The software or headers described may not be present on your Mac OS X installation until you install the developer tools package. This package is available on your Mac OS X installation DVD, and the latest versions can be downloaded from developer.apple.com.

For more information about the manual page format, see the manual page for manpages(5).

AUDITCTL(2)                 BSD System Calls Manual                AUDITCTL(2)

NAME
     auditctl -- specify a new file for the audit trail to log to

SYNOPSIS
     #include <bsm/audit.h>

     int
     auditctl(const char * path);

DESCRIPTION
     The auditctl() function directs the kernel to begin writing the global audit trail to the specified to
     the file specified by path.  Specifying a path of NULL will tell the system to stop writing to the
     audit trail, without disabling audit. To begin writing to a file again, simply pass another path.

RETURN VALUES
     Upon successful completion a value of 0 is returned.  Otherwise, a value of -1 is returned and errno is
     set to indicate the error.

SEE ALSO
     audit(2), auditon(2), getauid(2), setauid(2), getaudit(2), setaudit(2)

HISTORY
     The auditctl() function call first appeared in Mac OS X 10.3 (Panther).

Darwin                           July 30, 2007                          Darwin