HPE Community
Operating System - HP-UX
1753781 Members
7382 Online
108799 Solutions
New Discussion юеВ

utssys auditing event

 
Erich Noll_1
Occasional Advisor

тАО12-21-2000 11:12 AM

тАО12-21-2000 11:12 AM

utssys auditing event

Hello,

I've got auditing turned up on a 712/60 hpux 11.00 and I see a gazillion occurrences of the utssys events in the audit report. What is utssys? Can it cause harm? I'd rather not totally shut off event type admin because there are a lot of other event types within admin that I would like to track. Is it possible to disable utssys but continue to capture all other admin type evnts?
"It's better to remain silent and be thought a fool than to speak and remove all doubt" - Samuel Clemens
0 Kudos
Reply
2 REPLIES 2
Anthony Goonetilleke
Esteemed Contributor

тАО12-21-2000 12:09 PM

тАО12-21-2000 12:09 PM

Re: utssys auditing event

utsys is used to implement the following

# ll /usr/sbin/setuname
# ll /sbin/uname
# ll /usr/bin/uname

So when ever anyone executes them you might get the message
Minimum effort maximum output!
0 Kudos
Reply
Robert Landstrum
Occasional Advisor

тАО12-21-2000 12:50 PM

тАО12-21-2000 12:50 PM

Re: utssys auditing event

You can go into system calls and just turn off the utssys system call. But after a reboot, it will be turned back on. I have been fighting with HP on this subject for sometime and they simply stated that is the way it works.
If I thought the answer was easy, I would have called HP.
0 Kudos
Reply
The opinions expressed above are the personal opinions of the authors, not of Hewlett Packard Enterprise. By using this site, you accept the Terms of Use and Rules of Participation.