HPE Community
Operating System - HP-UX
1833027 Members
2306 Online
110049 Solutions
New Discussion

Audit mv su and init

 
Rene Mendez_4
Super Advisor

‎02-11-2004 10:09 AM

‎02-11-2004 10:09 AM

Audit mv su and init


I need audit with trusted su, mv, init, but this system call no is defualt.

how to configure this or how to personalize audith system call

Regards.
Rene
0 Kudos
Reply
2 REPLIES 2
Sridhar Bhaskarla
Honored Contributor

‎02-11-2004 10:21 AM

‎02-11-2004 10:21 AM

Re: Audit mv su and init

Hi Rene,

Following are the corresponding system calls.

mv - rename
su - setuid, setgid
init - This does quite a few things. So, I am not sure if you can pick up only few systems calls corresponding to init process

-Sri
You may be disappointed if you fail, but you are doomed if you don't try
0 Kudos
Reply
Rene Mendez_4
Super Advisor

‎02-11-2004 10:52 AM

‎02-11-2004 10:52 AM

Re: Audit mv su and init

I prove use de command mv,su check de trusted log and this events no is registred en log.

Regards.
Rene
0 Kudos
Reply
The opinions expressed above are the personal opinions of the authors, not of Hewlett Packard Enterprise. By using this site, you accept the Terms of Use and Rules of Participation.