Skip to content

Commit 095fcb5

Browse files
committed
Add documentation for af_unix state report
1 parent 6bee1e4 commit 095fcb5

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

audisp/plugins/af_unix/audisp-af_unix.8

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
.TH AUDISP-AF_UNIX "8" "Apr 2023" "Red Hat" "System Administration Utilities"
1+
.TH AUDISP-AF_UNIX "8" "Aug 2025" "Red Hat" "System Administration Utilities"
22
.SH NAME
33
audisp-af_unix \- plugin to push audit events to an af_unix socket
44
.SH SYNOPSIS
@@ -15,8 +15,12 @@ The
1515
.B af_unix.conf
1616
file must also include the line \fBformat = binary\fP. This setting specifies the input format that the \fBaudisp-af_unix\fP plugin expects from the audit event dispatcher. It ensures that the input delivered to the plugin is in binary format, enabling the plugin to reconstruct headers in their proper binary structure.
1717

18+
When the plugin is sent \fBSIGUSR1\fP, it writes a state report to \fBaf_unix.state\fP.
19+
1820
.SH FILES
1921
/etc/audit/plugins/af_unix.conf
22+
/run/audit/audispd_events
23+
/run/audit/af_unix.state
2024
/etc/audit/auditd.conf
2125
.SH "SEE ALSO"
2226
.BR auditd.conf (8),

0 commit comments

Comments
 (0)