Oracle Solaris System Administration (MOSC)

MOSC Banner

cis hardening - configure solaris auditing

Hello, Good day to all. Hoping someone can help and have any idea on my query. I am doing cis hardening. As per guideline, we need to perform the below commands.

auditconfig -conf
auditconfig -setflags lo,ad,ft,ex,cis
auditconfig -setnaflags lo
auditconfig -setpolicy cnt,argv,zonename
auditconfig -setplugin audit_binfile active p_minfree=1
audit -s
rolemod -K audit_flags=lo,ad,ft,ex,cis:no root

The rolemod command is not working so I replaced it with usermod which works.

However, when we are checking, the word "cis" is not appearing on the list.

root@hostnameA:/etc/security# /usr/sbin/auditconfig -getflags | /usr/bin/grep "active user default audit flags *="

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center