Gary Winiger,
I'm searching for a way to audit events such as writes/downloads to local
devices such as cdroms or printers, as well as uploads from local devices such
as cdroms, etc. I haven't found a way to do this to the granularity that I
need. For example, I need the user & filename of anything spooled to a printer
or any file read from a cdrom. Any ideas?
Scott
//signed//
SCOTT EVERARD, Contractor; CISSP
IA Security Engineer; AF DCGS IA-3
Spectrum
PH: (757) 224-7503
FX: (757) 224-7515
scott.everard at sptrm.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://mail.opensolaris.org/pipermail/security-discuss/attachments/20071017/39356fed/attachment.html>