cis hardening - configure solaris auditing
Hello, Good day to all. Hoping someone can help and have any idea on my query. I am doing cis hardening. As per guideline, we need to perform the below commands.
auditconfig -conf
auditconfig -setflags lo,ad,ft,ex,cis
auditconfig -setnaflags lo
auditconfig -setpolicy cnt,argv,zonename
auditconfig -setplugin audit_binfile active p_minfree=1
audit -s
rolemod -K audit_flags=lo,ad,ft,ex,cis:no root
The rolemod command is not working so I replaced it with usermod which works.
However, when we are checking, the word "cis" is not appearing on the list.
root@hostnameA:/etc/security# /usr/sbin/auditconfig -getflags | /usr/bin/grep "active user default audit flags *="