Solaris 10 pkgadd & pkgrm usage audit

Hi All,

I need to log pkgadd and pkgrm usage on Solaris 10 SPARC system. How to create new audit event for this?

Tried to add few classes to audit_control file, but pkgadd and pkgrm are not logged.

audit_class and audit_event files are system default.

# cat audit_control

flags:lo

naflags:lo

plugin:name=audit_binfile.so;p_dir=/var/audit; p_minfree=20;

plugin:name=audit_syslog.so;p_flags=+lo,+as,+ap,+ss

@" >>/var/adm/auditlog

# pkgadd -d /var/spool/pkg/appres.1.0.2.SPARC.64bit.Solaris.10.pkg

...

# pkgrm appres

...

# tail /var/adm/auditlog

...