show diff on audited files after editition AIX

We have enabled  audit on files insode AIX systems and it's working as expected. For example, if you edit and change /etc/myfile.conf with VI, a record is shown on audit logs:

S_ENVIRON_WRITE root     root     Thu Feb 11 10:59:01 2016 OK          vi
         fichero audit object write event detected /etc/myfile.conf

But, the question:
 Is possible to audit, using auditbin,  the diff with original and the changed /etc/myfile.conf file?

If I remember well, auditd on Linux can do this.

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

That's not possible, unfortunately.

AIX audit records would have to contain "before" and "after" images of file objects to perform a "diff",
which is not the case.

You cannot customize the content of an audit record, auditpr just formats the tail part of an audit record for readability,
as predefined in the events config and the head part according to various auditpr flags, that's all.

Sorry, no better news!


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
CSIA ANAuthor Commented:
Thanks WMP!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Unix OS

From novice to tech pro — start learning today.