219
edits
FIPS Operational Environment: Difference between revisions
Jump to navigation
Jump to search
m
→Access to System Audit Log
| Line 149: | Line 149: | ||
-r--r----- 1 root root 5242936 May 20 18:01 audit.log.2 | -r--r----- 1 root root 5242936 May 20 18:01 audit.log.2 | ||
On Solaris default audit records are stored in | On Solaris default audit records are stored in: /var/audit/. | ||
'''Configure the Solaris Auditing:''' | |||
To configure the System Audit Logs on Solaris the following administration tasks need to be completed. Create the audit class 'fp', then create the audit event 'AUE_FIPS_AUDIT ' and add the class 'fp' to the audit_control file. | To configure the System Audit Logs on Solaris the following administration tasks need to be completed. Create the audit class 'fp', then create the audit event 'AUE_FIPS_AUDIT ' and add the class 'fp' to the audit_control file. | ||
Edit /etc/security/audit_class | |||
add line: | add line: | ||
0x99000000:fp:NSS FIPs Security Msgs | 0x99000000:fp:NSS FIPs Security Msgs | ||
Edit /etc/security/audit_event | |||
add line: | add line: | ||
34444:AUE_FIPS_AUDIT:fp | 34444:AUE_FIPS_AUDIT:fp | ||
Edit /etc/security/audit_control | |||
add 'fp' to the "flags:" as in: | add 'fp' to the "flags:" as in: | ||
flags:lo,ap,fp | flags:lo,ap,fp | ||