The auditing feature of HP-UX 11i contains configuration
files, commands, and manpages. These are listed in the following sections.
Commands |
|
Table 10-1 contains
a brief description of each auditing command.
Table 10-1 Audit Commands
Command | Description |
---|
audevent | Changes or displays event or system call status. |
audisp | Displays the audit records. |
audomon | Sets the audit file monitoring and size parameters. |
audsys | Starts and stops auditing; sets and displays audit
file or directory information. |
userdbset | Selects users to be audited by specifying the AUDIT_FLAG=1 option. |
Audit Configuration Files |
|
Table 10-2 contains a brief description of each configuration file associated
with the audit feature.
Table 10-2 Audit Configuration Files
File | Description |
---|
/etc/audit/audit.conf | File containing pre-defined event classification
information. |
/etc/audit/auditr_site.conf | File containing site-specific event classification
information. |
/etc/default/security | File containing system-wide auditing defaults. |
/var/adm/userdb | Database containing per-user audit information. |
/etc/rc.config.d/auditing | File containing configuration information
directing audit to start at system reboot. |
Audit Manpages |
|
Table 10-3 contains
a brief description of each manpage associated with the auditing feature.
Table 10-3 Audit Manpages
Manpage | Description |
---|
audevent(1M) | Describes audevent functionality and syntax. |
audisp(1M) | Describes audisp functionality and syntax. |
audomon(1M) | Describes audomon functionality and syntax. |
audsys(1M) | Describes audsys functionality and syntax. |
userdbset(1M) | Describes userdbset functionality and syntax. |
audit.conf(4) | Describes
the /etc/audit/audit.conf file. |
audit(5) | Gives introductory information about HP-UX auditing. |