Oracle Solaris System Administration (MOSC)

MOSC Banner

audit -n seems not be working in Solaris 10

edited Apr 16, 2012 3:20AM in Oracle Solaris System Administration (MOSC) 7 commentsAnswered ✓
Hello,
I've enabled audit in Solaris 10.
# cat /etc/security/audit_control
...
flags:lo,pf
naflags:lo,na
plugin:name=audit_binfile.so; p_dir=/audit/1,/audit/2,/audit/3; p_minfree=20; p_fsize=1073741823


# cat /etc/security/audit_user
...
root:lo,ex,fw:no


# cat /etc/security/audit_startup
...
/usr/bin/echo "Starting BSM services."
/usr/sbin/auditconfig -setpolicy +cnt
/usr/sbin/auditconfig -setpolicy +seq
/usr/sbin/auditconfig -setpolicy +arge
/usr/sbin/auditconfig -setpolicy +argv
/usr/sbin/auditconfig -setpolicy +path
/usr/sbin/auditconfig -setpolicy +zonename
/usr/sbin/auditconfig -conf
/usr/sbin/auditconfig -aconf


# auditconfig -getcond

audit condition = auditing

# auditconfig -getaudit
audit id = user1(100)

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center