I have to set audit logs on certain events on a solaris 10 server.
While I had no problems on linux, I'm going crazy to do the same thing on solaris 10, since I don't have enough expertise on this OS .
I should be able to identify these 4 different events:
1: Tracking all the activities performed by root account
2: Tracking all privilege escalation performed by sudo or su command
3: Tracking all account removal/add in the system
4: Detects system time changes which are not done by a local service or a service account.
Can you give me a hand? Thanks a lot to everyone!
Your question has nothing to do with Oracle Enterprise Manager (the subject of this forum) or Oracle database. You need to find a Solaris forum. Oracle maintains one here, but it looks like it's not very active so you might be better off googling 'solaris suppport forums'