Solved

AIX Auditing

Posted on 2007-11-14
4
2,365 Views
Last Modified: 2013-11-17
Hi,

I need to set-up auditing on all our AIX servers and I want to edit all users with selected classes. how do I set it on the /etc/security/audit/config?

Will this work? (example)
users:
             ALL = general, objects

Regards
0
Comment
Question by:mkuser01
4 Comments
 
LVL 3

Expert Comment

by:amirs80
ID: 20279353
use smitty aixpert
it will help you a lot
0
 
LVL 10

Accepted Solution

by:
dfke earned 500 total points
ID: 20288678
You have to add the users using the chuser command. It's more convenient to script this than doing it manually though. To get a list of current accounts type:

lsuser -c -a id home ALL | sed '/^#.*/d' | tr ':' '\011' | awk '{print$1}' | sort

However you can make default classes for new users. Add the audit class to the /usr/lib/security/mkuser.default file, so new users automatically have the right audit call associated.

user:
    auditclasses =
    pgrp =
    groups =
    shell = /usr/bin/ksh
    home = /home/$USER
0
 
LVL 9

Expert Comment

by:Suhas .
ID: 21170221
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I will leave the following recommendation for this question in the Cleanup Zone:

Accept: dfke {http:#20288678}

Any objections should be posted here in the next 4 days. After that time, the question will be closed.

Suhas
Experts Exchange Cleanup Volunteer
      
0
 
LVL 1

Expert Comment

by:Computer101
ID: 21197688
Forced accept.

Computer101
EE Admin
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Introduction Regular patching is part of a system administrator's tasks. However, many patches require that the system be in single-user mode before they can be installed. A cluster patch in particular can take quite a while to apply if the machine…
Why Shell Scripting? Shell scripting is a powerful method of accessing UNIX systems and it is very flexible. Shell scripts are required when we want to execute a sequence of commands in Unix flavored operating systems. “Shell” is the command line i…
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…
In a previous video, we went over how to export a DynamoDB table into Amazon S3.  In this video, we show how to load the export from S3 into a DynamoDB table.

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now