Are you “signing in” through ^ZU?
-----Original Message-----
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Usha
Sent: Monday, August 15, 2005
11:04 PM
To:
[email protected]
Subject: Re: [Hardhats-members]
Audit not generated
Thanks for the feedback. I saw the manual mentioned. It
helped me understand the way parameters are to be defined.
Through the ESTABLISH SYSTEM AUDIT PARAMETERS option, I
tried setting the audit parameters again to audit the usage of all the options.
The output of DISPLAY THE KERNEL AUDIT PARAMETERS option on
Aug 12
List of current Kernel audit parameters
Initiate on: AUG
12,2005
Terminate on: AUG 13,2005
Failed access attempt audit: ALL DEVICES/TEXT RECORDED
I used many options that day but the output of AUDITED
OPTIONS LOG option on Aug 16 is
Select System Audit Reports Option: audited Options Log
START WITH DATE/TIME: FIRST//
START WITH OPTION: FIRST//
DEVICE: HOME// TELNET
MENU OPTION AUDIT LOG AUG
16,2005 11:27
AM PAGE 1
--------------------------------------------------------------------------------
***
NO RECORDS TO PRINT ***
I have tried the seeing the manual but it does not help me
in this context. Any suggestions?
----- Original Message -----
Sent: Thursday, July 28,
2005 12:32 AM
Subject: RE:
[Hardhats-members] Audit not generated
Check out Option and Server Usage Audits
in Chapter 3 of the Kernel Security Tools Manual (in document krn8_0st.pdf) for
more details.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Usha
Sent: Wednesday, July 27, 2005
12:24 AM
To: [email protected]
Subject: [Hardhats-members] Audit
not generated
I want to audit the use of an option. I used the ESTABLISH
SYSTEM AUDIT PARAMETERS option which is displayed as following in DISPLAY THE
KERNEL AUDIT PARAMETERS.
List of current Kernel audit parameters
Initiate on: JUL
26,2005
Terminate on: JUL 27,2005
Option(s) to Audit: DG SECURITY ENTER/EDIT
Failed access attempt audit: ALL DEVICES/TEXT RECORDED
When I try to check the log using AUDITED OPTIONS LOG
option, NO RECORDS TO PRINT is displayed. (after accessing the option
ENTER/EDIT PATIENT SECURITY LEVEL)
Do I need to start some task or enable the auditing or
something?
