Bastille hardening and log files

[robert fowler_1]

I have run Bastille on two systems and wish to know were the following logs go

Q Should bastille enable logging for all inetd connections ?

Q Do you want basic system security auditing enabled.

Note I think this might be displayed in x windows, however this version is run from a precompiled config file and bastille -b

[Steven E. Protter]

In this circumstance, I'd look at the config file and the log file for the bastille -b run.

Somewhere in /var/opt/sec_mgmt/bastille

SEP

[Robert Fritz]

Hi there,

The last run config is kept at:
/var/opt/sec_mgmt/bastille/last.config

You can look in there to see what the value was for the questions you're referring to.

"bastille -l" will tell you which /etc/opt/sec_mgmt config file coresponds to that file.

Hope that helps,
-R

[robert fowler_1]

I think i have explained this wrong, i need to know what changes are been made to the OS. I have support staff asking were the log files are and Bastille only tells me that it is enabeling logging, not were the files will be.

I want to know for the two bastille questions answered were are the log files stored in HP-UX 11i version 1

thanks again

[Ranjith_5]

Hi Robert,

Connection logging for inetd daemon loggs the connection status for all telnet , ftp etc to /var/adm/syslog/syslog.log

regards,
Syam

[Ranjith_5]

Hi Robert,

Forgot to write the other one.

You can go to sam-->auditing and security-->audited events-->select the event-->actions--> view audit log.

This shows the path of the audit log.If you need to change the default path u can do it here.

Default path is /.secure/etc/


Regards,
Syam

[robert fowler_1]

thanks everyone