Are you signing in
through ^ZU?
-----Original
Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Usha
Sent: Monday, August 15, 2005 11:04
PM
To: hardhats-members@lists.sourceforge.net
Subject: Re: [Hardhats-members] Audit not
generated
Thanks for the feedback. I saw the
manual mentioned. It helped me understand the way parameters are to be
defined.
Through the ESTABLISH SYSTEM AUDIT
PARAMETERS option, I tried setting the audit parameters again to audit the
usage of all the options.
The output of DISPLAY THE KERNEL
AUDIT PARAMETERS option on Aug 12
List of current Kernel audit
parameters
Initiate on: AUG
12,2005
Terminate on: AUG 13,2005
Failed access attempt audit: ALL
DEVICES/TEXT RECORDED
I used many options that day but
the output of AUDITED OPTIONS LOG option on Aug 16 is
Select System Audit Reports
Option: audited Options Log
START WITH DATE/TIME: FIRST//
START
WITH OPTION: FIRST//
DEVICE: HOME// TELNET
MENU OPTION AUDIT
LOG AUG
16,2005 11:27
AM PAGE
1
--------------------------------------------------------------------------------
*** NO RECORDS TO PRINT ***
I have tried the seeing the manual
but it does not help me in this context. Any
suggestions?
----- Original Message -----
Sent:
Thursday, July 28, 2005 12:32 AM
Subject: RE:
[Hardhats-members] Audit not generated
Check out Option
and Server Usage Audits in Chapter 3 of the Kernel Security Tools Manual (in
document krn8_0st.pdf) for more details.
-----Original
Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Usha
Sent: Wednesday, July 27, 2005 12:24
AM
To: hardhats-members@lists.sourceforge.net
Subject: [Hardhats-members] Audit not
generated
I want to audit the use of an
option. I used the ESTABLISH SYSTEM AUDIT PARAMETERS option which is
displayed as following in DISPLAY THE KERNEL AUDIT PARAMETERS.
List
of current Kernel audit parameters
Initiate on: JUL
26,2005
Terminate on: JUL 27,2005
Option(s) to Audit: DG
SECURITY ENTER/EDIT
Failed access attempt audit: ALL DEVICES/TEXT
RECORDED
When I try to check the log
using AUDITED OPTIONS LOG option, NO RECORDS TO PRINT is displayed. (after
accessing the option ENTER/EDIT PATIENT SECURITY
LEVEL)
Do I need to start some task or
enable the auditing or something?
