SYSLOG(8)

NAME
syslog, logpr - system security logging

SYNOPSIS
priv syslog command [ arg2 [ arg3 ] ]

/etc/logpr file [ offset ]

DESCRIPTION
Syslog controls the mandatory logging scheme. License T_LOG is required. The variety of different commands and command formats reflects the full complexity of the protean syslog(2) system call. In the usages given below a mask argument is a combination of letters NILESDATUPX, meaning:

N   Record all uses of file names.

S   Record all seek calls.

U   Record all writes to the `u area'.

I   Record all accesses of inode contents.

D   Record possession and use of file descriptors.

P   Record process history: exec(2), fork(2), kill(2), exit(2).

L   Record all explicit changes of labels by setflab (see getflab(2)) and setplab (see getplab(2)).

A   Record all changes of labels.

X   Record all uses of privilege.

E   Record all ELAB error returns.

T   Record all uses of a traced file or process.

Valid arguments to syslog are:

on file logdev
    Nominate file as repository for user generated logging records written to logging special file logdev. File must be a full path name, and must be openable for writing. If logdev's minor device number is zero, file will also receive mandatory (kernel generated) logging records. Logdev may be a full path name or a minor device number.

off logdev
    Cancel the effect of an on command.

get n
    Print the value of the n-th log mask. Values of n are 0, 1, 2, or 3 for the `poison' masks; 4 is `global' mask.

set n mask
    Set the value of the n-th log mask.

fget file
    Print the poison level of file, one of the integers 0, 1, 2, or 3. File must be the full path name of a readable file.

fset file n
    Set the poison level of file to n. File must be the full path name of a readable file.

pget pid
    Print the logging mask of process pid.

pset pid mask
    Set the logging mask of process pid to mask.

Logpr converts to cryptic ASCII the cryptic binary format of a log file described in log(5). The optional numerical byte offset tells where in the file printing is to start.

FILES

where
    syslog makes voluntary entries

SEE ALSO
syslog(2), log(4), log(5).

DIAGNOSTICS
`Covert channel warning': the log file has a label that is neither top nor flagged L_NO.