topic Re: audit file corruption in Operating System - HP-UX

audit file corruption

pedliz11 — Tue, 27 Nov 2007 17:15:17 GMT

i am getting this message on console:
audit system corruption: could not open/read
audit control file - /.secure/etc/audnames !
No such file or directory

how to i fix this? any ideas?

Re: audit file corruption

whiteknight — Tue, 27 Nov 2007 22:15:05 GMT

Hi,

1) #audsys
2) #cd .secure/etc
3) #touch audfile1 audfile2
4) #audsys -n -c audfile3 -s 1039 -x audfile4 -z 1039
warning: /.secure/etc/audnames does not exist
created/repaired /.secure/etc/audnames

5) # audsys
auditing system is currently on
current file: /.secure/etc/audfile3
next file: /.secure/etc/audfile4

statistics- afs Kb used Kb avail % fs Kb used Kb avail %
current file: 1039 0 100 204800 201218 2
next file: 1039 0 100 204800 201218 2

Hope this help.

WK

Re: audit file corruption

pedliz11 — Wed, 28 Nov 2007 11:34:02 GMT

it worked thanks