HPE Community
Operating System - HP-UX
1833758 Members
2691 Online
110063 Solutions
New Discussion

Re: Is it Possible to Turn On Auditing for a certain Directory / Path?

 
Alzhy
Honored Contributor

‎07-29-2004 02:00 AM

‎07-29-2004 02:00 AM

Is it Possible to Turn On Auditing for a certain Directory / Path?

and what what the overhead is?

We're thinking of turning on auditing so we know when files are overwritten or deleted. Is this possible? And how?

Hakuna Matata.
0 Kudos
Reply
2 REPLIES 2
Steve Steel
Honored Contributor

‎07-29-2004 02:11 AM

‎07-29-2004 02:11 AM

Re: Is it Possible to Turn On Auditing for a certain Directory / Path?

Hi


Its well explained here

http://www.docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90672/B2355-90672_top.html&con=/hpux/onlinedocs/B2355-90672/00/01/124-con.html&toc=/hpux/onlinedocs/B2355-90672/00/01/124-toc.html&searchterms=auditing&queryid=20040729-080908


It has an overhead proportional to system usage.You are doing more work.



Steve Steel
If you want truly to understand something, try to change it. (Kurt Lewin)
0 Kudos
Reply
Steven E. Protter
Exalted Contributor

‎07-29-2004 02:42 AM

‎07-29-2004 02:42 AM

Re: Is it Possible to Turn On Auditing for a certain Directory / Path?

See this script.

#!/usr/bin/ksh

audsys -f
mv /home/secure/aud* /backups
audsys -n -c /home/secure/audfile1 -s 10000 -x /home/secure/audfile2 -z 10000

This tells it to go elsewhere sice the default is to root fs .secure/

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
0 Kudos
Reply
The opinions expressed above are the personal opinions of the authors, not of Hewlett Packard Enterprise. By using this site, you accept the Terms of Use and Rules of Participation.