?
Solved

AIX Auditing

Posted on 2007-11-14
4
Medium Priority
?
2,377 Views
Last Modified: 2013-11-17
Hi,

I need to set-up auditing on all our AIX servers and I want to edit all users with selected classes. how do I set it on the /etc/security/audit/config?

Will this work? (example)
users:
             ALL = general, objects

Regards
0
Comment
Question by:mkuser01
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 3

Expert Comment

by:amirs80
ID: 20279353
use smitty aixpert
it will help you a lot
0
 
LVL 10

Accepted Solution

by:
dfke earned 2000 total points
ID: 20288678
You have to add the users using the chuser command. It's more convenient to script this than doing it manually though. To get a list of current accounts type:

lsuser -c -a id home ALL | sed '/^#.*/d' | tr ':' '\011' | awk '{print$1}' | sort

However you can make default classes for new users. Add the audit class to the /usr/lib/security/mkuser.default file, so new users automatically have the right audit call associated.

user:
    auditclasses =
    pgrp =
    groups =
    shell = /usr/bin/ksh
    home = /home/$USER
0
 
LVL 9

Expert Comment

by:Suhas .
ID: 21170221
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I will leave the following recommendation for this question in the Cleanup Zone:

Accept: dfke {http:#20288678}

Any objections should be posted here in the next 4 days. After that time, the question will be closed.

Suhas
Experts Exchange Cleanup Volunteer
      
0
 
LVL 1

Expert Comment

by:Computer101
ID: 21197688
Forced accept.

Computer101
EE Admin
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Hello fellow BSD lovers, I've created a patch process for patching openjdk6 for BSD (FreeBSD specifically), although I tried to keep all BSD versions in mind when creating my patch. Welcome to OpenJDK6 on BSD First let me start with a little …
This tech tip describes how to install the Solaris Operating System from a tape backup that was created using the Solaris flash archive utility. I have used this procedure on the Solaris 8 and 9 OS, and it shoudl also work well on the Solaris 10 rel…
Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:
In a previous video, we went over how to export a DynamoDB table into Amazon S3.  In this video, we show how to load the export from S3 into a DynamoDB table.
Suggested Courses

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question