AIX Auditing

Hi,

I need to set-up auditing on all our AIX servers and I want to edit all users with selected classes. how do I set it on the /etc/security/audit/config?

Will this work? (example)
users:
             ALL = general, objects

Regards
mkuser01Asked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
dfkeConnect With a Mentor Commented:
You have to add the users using the chuser command. It's more convenient to script this than doing it manually though. To get a list of current accounts type:

lsuser -c -a id home ALL | sed '/^#.*/d' | tr ':' '\011' | awk '{print$1}' | sort

However you can make default classes for new users. Add the audit class to the /usr/lib/security/mkuser.default file, so new users automatically have the right audit call associated.

user:
    auditclasses =
    pgrp =
    groups =
    shell = /usr/bin/ksh
    home = /home/$USER
0
 
amirs80Commented:
use smitty aixpert
it will help you a lot
0
 
Suhas .QA ManagerCommented:
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I will leave the following recommendation for this question in the Cleanup Zone:

Accept: dfke {http:#20288678}

Any objections should be posted here in the next 4 days. After that time, the question will be closed.

Suhas
Experts Exchange Cleanup Volunteer
      
0
 
Computer101Commented:
Forced accept.

Computer101
EE Admin
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.