Solved

AIX Auditing

Posted on 2007-11-14
4
2,370 Views
Last Modified: 2013-11-17
Hi,

I need to set-up auditing on all our AIX servers and I want to edit all users with selected classes. how do I set it on the /etc/security/audit/config?

Will this work? (example)
users:
             ALL = general, objects

Regards
0
Comment
Question by:mkuser01
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 3

Expert Comment

by:amirs80
ID: 20279353
use smitty aixpert
it will help you a lot
0
 
LVL 10

Accepted Solution

by:
dfke earned 500 total points
ID: 20288678
You have to add the users using the chuser command. It's more convenient to script this than doing it manually though. To get a list of current accounts type:

lsuser -c -a id home ALL | sed '/^#.*/d' | tr ':' '\011' | awk '{print$1}' | sort

However you can make default classes for new users. Add the audit class to the /usr/lib/security/mkuser.default file, so new users automatically have the right audit call associated.

user:
    auditclasses =
    pgrp =
    groups =
    shell = /usr/bin/ksh
    home = /home/$USER
0
 
LVL 9

Expert Comment

by:Suhas .
ID: 21170221
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I will leave the following recommendation for this question in the Cleanup Zone:

Accept: dfke {http:#20288678}

Any objections should be posted here in the next 4 days. After that time, the question will be closed.

Suhas
Experts Exchange Cleanup Volunteer
      
0
 
LVL 1

Expert Comment

by:Computer101
ID: 21197688
Forced accept.

Computer101
EE Admin
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Hello fellow BSD lovers, I've created a patch process for patching openjdk6 for BSD (FreeBSD specifically), although I tried to keep all BSD versions in mind when creating my patch. Welcome to OpenJDK6 on BSD First let me start with a little …
When you do backups in the Solaris Operating System, the file system must be inactive. Otherwise, the output may be inconsistent. A file system is inactive when it's unmounted or it's write-locked by the operating system. Although the fssnap utility…
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
Learn how to get help with Linux/Unix bash shell commands. Use help to read help documents for built in bash shell commands.: Use man to interface with the online reference manuals for shell commands.: Use man to search man pages for unknown command…

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question