The audit_data file contains information about the audit daemon. The file contains the process ID of the audit daemon, and the pathname of the current audit log file. The format of the file is:

pid>:<pathname>

Where pid is the process ID for the audit daemon, and pathname is the full pathname for the current audit log file.

/etc/security/audit_data

audit(1M), auditd(1M), bsmconv(1M), audit(2), audit.log(4)

The functionality described in this man page is available only if the Basic Security Module (BSM) has been enabled. See bsmconv(1M) for more information.