Displaying 5 results from an estimated 5 matches for "audit_user".
2007 Feb 08
1
audit problems
Hi!
I'm experiencing some problems configuring audit on 6.2-RELEASE system.
It doesn't seem to log anything except login messages. The only thing
I've modified in config is the root user specification in audit_users.
Now it looks like this:
root:lo,ex,fw,fc:no
However nor ex, non fw or fc messages doesn't get into the log.
Furthermore, deleting lo from audit_users and audit_control doesn't stop
login messages logging.
Is it possible that some other kernel options interfere with AUDIT
(e.g. MAC)?
Th...
2007 Jul 14
2
OpenBSM questions
...p://www.freebsd.org/cgi/query-pr.cgi?pr=114534.
Please, someone from freebsd team - take it, i think its better to fix
this before next release.
2) I found that when i`m using XDM as login manager with OpenBSM, all my
audit events comes with subject -1, and becauseof this i cant filter
them with audit_user policy. When i`m using console "login" all work as
designed and i got logged in user in the subject.
I think that xdm must be patched to support audit, i found audit code
in the login sources. My be someone already did such patches?
3) All services running from rc scripts also using &...
2006 Oct 02
0
Audit handbook chapter review, call for general testing
...f recent RELENG_6 and 6.2-BETA2 are also
pretty complete, and include more detailed reference information. The
audit(4) man page has a good set of cross-references to various commands
(audit(8), auditd(8), praudit(8), auditreduce(8)), as well as the audit
configuration files (audit_control(5), audit_user(5), etc).
Remember that audit support in 6.2-RELEASE will be considered experimental,
and has a number of known limitations (such as not fully auditing all
non-native FreeBSD system call interfaces, and not auditing all userland
administrative events of interest), but it should be useful and us...
2006 Jun 05
0
Heads up: OpenBSM 1.0a6, per-auditpipe preselection imported to CVS (fwd)
...bsm/config/install-sh
U src/contrib/openbsm/config/ltmain.sh
U src/contrib/openbsm/config/missing
U src/contrib/openbsm/etc/audit_class
U src/contrib/openbsm/etc/audit_control
U src/contrib/openbsm/etc/audit_event
N src/contrib/openbsm/etc/audit_filter
U src/contrib/openbsm/etc/audit_user
U src/contrib/openbsm/etc/audit_warn
U src/contrib/openbsm/libbsm/Makefile.am
U src/contrib/openbsm/libbsm/Makefile.in
U src/contrib/openbsm/libbsm/au_class.3
U src/contrib/openbsm/libbsm/au_control.3
U src/contrib/openbsm/libbsm/au_event.3
U src/contrib/openbsm/libbsm/au_free_...
2008 Jan 01
3
Tracking user's activity
Greetings,
I've been looking for a proper way to to track down user's activity
inside the shell as I'm helping my colleague to configure a web
hosting and shell hosting server.
Someone have referred me to this article --
http://bsdtips.utcorp.net/mediawiki/index.php/Snoop which is using
'watch' commands to view user's activity once they logged in to the
server
I found