topic Re: Require help on auditd command in Operating System - HP-UX

Require help on auditd command

Anoopkumar — Sun, 25 Jun 2006 01:17:48 GMT

Hi,
I am executing one script which in turns call another many scripts, I want to trace all sequences of calls in one log file. The o/s is hpux 11.11. I tried with command 'auditd' as follow:
1. Started /sbin/init.d/dce
2. Logged in as user "mped" and executed
auditd -t trace.log
The above commnand basically starts auditd daemon & should create trace.log under mped home directory to record traces of any execution of script or command in details. But in my case no log file is created and hence no recording.
The main goal is to trace the main script execution in detail. I tried with redirecting script like 2>&1 but it doesn't record in details.
If anybody working on auditd or similar to that then pl. help me.

Regards,
Mahadev

Re: Require help on auditd command

Steven E. Protter — Sun, 25 Jun 2006 02:21:08 GMT

Shalom Mahadev,

Best bet here is a common logfile set by a source file.

vi /etc/rc.config.d/scriptmaster
# my name do what you will

conents if scriptmaster

SCRIPT_LOG=/var/adm/scriptmaster.log

Modify the scripts to have this line in them.

. /etc/rc.config.d/scriptmaster

You now have a common repository for all log statements in the scripts.

SEP

Re: Require help on auditd command

Anoopkumar — Sun, 25 Jun 2006 03:30:49 GMT

Hi Steven,
No Luck, my script is perl based and it calls other scripts which can be binary format. I tried your method but didn't helped. Basically auditd does logging in detail, do you have other methods ?

regds,
Mahadev