Re: [Hardhats-members] Audit not generated

[Usha]

Hi   Thanks for the feedback. I saw the manual mentioned. It helped me understand the way parameters are to be defined. Through the ESTABLISH SYSTEM AUDIT PARAMETERS option, I tried setting the audit parameters again to audit the usage of all the options.   The output of DISPLAY THE KERNEL AUDIT PARAMETERS option on Aug 12   List of current Kernel audit parameters  Initiate on: AUG 12,2005               Terminate on:  AUG 13,2005   Failed access attempt audit: ALL DEVICES/TEXT RECORDED       I used many options that day but the output of AUDITED OPTIONS LOG option on Aug 16 is   Select System Audit Reports Option: audited Options Log START WITH DATE/TIME: FIRST//   START WITH OPTION: FIRST// DEVICE: HOME//   TELNET MENU OPTION AUDIT LOG    AUG 16,2005         11:27 AM            PAGE 1 --------------------------------------------------------------------------------                 *** NO RECORDS TO PRINT ***   I have tried the seeing the manual but it does not help me in this context. Any suggestions?   Regards Usha ----- Original Message ----- From: Cameron Schlehuber To: hardhats-members@lists.sourceforge.net Sent: Thursday, July 28, 2005 12:32 AM Subject: RE: [Hardhats-members] Audit not generated Check out Option and Server Usage Audits in Chapter 3 of the Kernel Security Tools Manual (in document krn8_0st.pdf) for more details.   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Usha Sent: Wednesday, July 27, 2005 12:24 AM To: hardhats-members@lists.sourceforge.net Subject: [Hardhats-members] Audit not generated   Hi I want to audit the use of an option. I used the ESTABLISH SYSTEM AUDIT PARAMETERS option which is displayed as following in DISPLAY THE KERNEL AUDIT PARAMETERS. List of current Kernel audit parameters  Initiate on: JUL 26,2005               Terminate on:  JUL 27,2005     Option(s) to Audit: DG SECURITY ENTER/EDIT Failed access attempt audit: ALL DEVICES/TEXT RECORDED     When I try to check the log using AUDITED OPTIONS LOG option, NO RECORDS TO PRINT is displayed. (after accessing the option ENTER/EDIT PATIENT SECURITY LEVEL)   Do I need to start some task or enable the auditing or something?   Regards Usha