audit -n seems not be working in Solaris 10
Hello,
I've enabled audit in Solaris 10.
I've enabled audit in Solaris 10.
# cat /etc/security/audit_control
...
flags:lo,pf
naflags:lo,na
plugin:name=audit_binfile.so; p_dir=/audit/1,/audit/2,/audit/3; p_minfree=20; p_fsize=1073741823
# cat /etc/security/audit_user
...
root:lo,ex,fw:no
# cat /etc/security/audit_startup
...
/usr/bin/echo "Starting BSM services."
/usr/sbin/auditconfig -setpolicy +cnt
/usr/sbin/auditconfig -setpolicy +seq
/usr/sbin/auditconfig -setpolicy +arge
/usr/sbin/auditconfig -setpolicy +argv
/usr/sbin/auditconfig -setpolicy +path
/usr/sbin/auditconfig -setpolicy +zonename
/usr/sbin/auditconfig -conf
/usr/sbin/auditconfig -aconf
# auditconfig -getcond
audit condition = auditing
# auditconfig -getaudit
audit id = user1(100)
0