Skip to content

Instantly share code, notes, and snippets.

@rtrouton
Created October 18, 2023 15:00
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save rtrouton/df35eff985db7dd39ac618a00ed776e1 to your computer and use it in GitHub Desktop.
Save rtrouton/df35eff985db7dd39ac618a00ed776e1 to your computer and use it in GitHub Desktop.
DEPRECATION NOTICE
The audit(4) subsystem has been deprecated since macOS 11.0, disabled since macOS 14.0, and WILL BE REMOVED in a future version of macOS. Applications that
require a security event stream should use the EndpointSecurity(7) API instead.
On this version of macOS, you can re-enable audit(4) by renaming or copying /etc/security/audit_control.example to /etc/security/audit_control, re-enabling the
system/com.apple.auditd service by running launchctl enable system/com.apple.auditd as root, and rebooting.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment