asked on 2/9/2016

Change /etc/security/audit/objects wihout restart auditbin daemon on AIX.

We know /etc/security/audit/objects file has files and scripts we want to audit on AIX, but AFAIK, you must restart auditbin everytime you add a nre file to be audited.

Question:

Is possible to add new files to /etc/security/audit/objects whitout shutdown/start auditbin daemon?

Thanks.

Unix OS

Last Comment

CSIA AN

2/9/2016

SOLUTION

woolmilkporc

2/9/2016

THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.

View this solution by signing up for a free trial.

Members can start a 7-Day free trial and enjoy unlimited access to the platform.

See Pricing Options

Start Free Trial

CSIA AN

2/9/2016

ASKER

Hi WMP,

It's Israel from ANdorra. I knew there not way to change objects file without restarting auditbin, but wanted to ask the mastr ;). If I remenber well, on redhat systems you can add/remove files or scripts to auditd whitout restarting it. On last thing, kill -HUP does not work on auditbin? I mean kill -HUP auditbin_PID?

Thank much!

ASKER CERTIFIED SOLUTION

woolmilkporc

2/9/2016

THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.

View this solution by signing up for a free trial.

Members can start a 7-Day free trial and enjoy unlimited access to the platform.

See Pricing Options

Start Free Trial

CSIA AN

2/9/2016

ASKER

It's nice to talk to you again :)

I dont want to restart anything. On the contary, I just want to add/remove new files to objects file wihout restarting it. But as you said before, it's not possible.

Thanks again.