8:autrace

From Linux Man Pages

Jump to: navigation, search
      autrace - a program similar to strace
      
      autrace program <program args>

Contents

DESCRIPTION

      autrace is a program that will add the audit rules to trace a process similar to strace. It will then execute the
      program passing arguments to it. The resulting audit information will be in the audit logs if the audit daemon is
      running or syslog. This command deletes all audit rules prior to executing the target program and after executing
      it. As a safety precaution, it will not run unless all rules are deleted with audtictl prior to use.

EXAMPLES

      The following illustrates a typical session:
 
      service auditd stop
      rm -f /var/log/audit/audit.log
      service auditd start
      autrace /bin/ls /tmp
      service auditd stop
      vi /var/log/audit/audit.log

RELATED

      auditd(8), auditctl(8)

CATEGORY

Personal tools