User Based Auditing in HP-UX 11.23

[unixinfopk]

Hi,

Anyone have the idea to enable user based auditing in HPUX 11.23. Like if we want to audit all root users or any specific user.

We have tried to enable user based auditing but logs shows that auditing for all users which are created in hpux.

Thanks & Kind Regards,

Sajjad Ahmed 

[sathishg]

Hi,

I am trying to enable auditing on hp-ux 11.23. I get the following error:

#  audsys
cannot open and lock /.secure/etc/audnames;
verify that the auditing system has been installed properly,
and the /.secure/etc directory exists, prior to running this command

I have also installed StdModSecExt from https://h20392.www2.hp.com/portal/swdepot/displayInstallInfo.do?productNumber=StdModSecExt&kiosk_app=&kiosk_id=

But I am unable to run audit.

Is there anyother package I have to install?

Thank you.

Best,
Sathish.

[sathishg]

Now I am able to run audsys command without any error and it is capturing some events. But events like user login, file deleted by an user is not being captured.

Is someone running auditing to capture user events successfully?

Thank you.

Best,

Sathish.