Operating System - HP-UX
1832308 Members
2483 Online
110041 Solutions
New Discussion

Enable auditing subsystem with HP-UX Secure Shell

 
Olivier Masse
Honored Contributor

Enable auditing subsystem with HP-UX Secure Shell

HP-UX Secure Shell (and OpenSSH) do not use the login() call by default, and login() is used by the auditing subsystem on trusted systems to activate auditing for a particular user. I opened a call about this a while ago and HP didn't seem eager to make HP-UX Secure Shell self-auditing.

Enabling useLogin brings some other problems which I don't remember; I think one of them is X11 forwarding that no longer works.

Since auditing was required at my company, I developed an external patch named 'audenable' to circumvent this, it is a setuid binary that enables auditing and forks a new shell. I seems to work well for me.

If you are interested, I posted the source here:
http://www.mayoxide.com/audenable

As I'm not a pro C programmer, any comment on securing the code further is welcome.

Thanks