From: Olivia Leonard (Olivia.Leonard@davy.ie)
Date: Tue Sep 14 2004 - 06:15:32 EDT
Hi
I have a problem with BSM auditing on Solaris 8 machines. I am using the
audit_event flag aa for all audit events which relate to audit usage, such
as getaudit, setaudit, getuseraudit and so on.
I want to audit these events for failure only, so I configured audit_control
as follows:
dir:/var/audit
flags:lo,ad,na,-aa
minfree:20
naflags:all
I also tried doing it this way:
dir:/var/audit
flags:lo,ad,na,^+aa
minfree:20
naflags:all
However I am still getting success of aa events reported to me. I have run
auditconfig -conf and audit -s having made the changes, I have rebooted the
box but to no avail.
Is there anyway I can stop successful aa events from being logged?
Thanks
Olivia
The information in this e-mail is confidential and may be legally privileged. It is intended solely for the addressee. Access to this e-mail by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying, distribution or any other action taken or any views, opinions or advice contained in this e-mail are those of the sending individual and not necessarily those of the firm. It is possible for data transmitted by e-mail to be deliberately or accidentally corrupted or intercepted. For this reason where the communication is by e-mail, J&E Davy does not accept any responsibility for any breach of confidence which may arise from the use of this medium. If you have received this e-mail in error please notify us immediately at mailto:helpdesk@davy.ie and delete this e-mail from your system.
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:29:26 EDT