Sponsored Content
Full Discussion: Sun Solaris Audit Program
Operating Systems Solaris Sun Solaris Audit Program Post 302068645 by ppass on Monday 20th of March 2006 04:15:17 AM
Old 03-20-2006
well ,

there are many programs that can be used ..
i would go for Tripwire it is comprehensive and easy to manage .

cheers
 

10 More Discussions You Might Find Interesting

1. Solaris

Solaris BSM audit log

I got a lot of this message in my /var/audit log how can I exclude this message? header,127,2,invalid event number,fe,hostsol1.com.sg,2007-12-21 00:10:01.001 +08:00,argument,1,0x5,processor ID,argument ,2,0x3,flag,text,P_STATUS,subject,zhang1,root,root,root,root,18228,576129155,291 131094... (1 Reply)
Discussion started by: geoffry
1 Replies

2. Solaris

audit in solaris

How do I know that audit is enabled in soalris. in AIX 'audit query' command gives me the info whether auditing is on or not. Raghav (1 Reply)
Discussion started by: raghavender_sri
1 Replies

3. Solaris

audit in solaris 10

can you please share what you use to audit what files are deleted, when files are deleted and who deleted them? thx (1 Reply)
Discussion started by: melanie_pfefer
1 Replies

4. Programming

Compile c program on Sun Solaris OS

Can anyone tell me how to compile a c programs on SunSolaris OS 5.1 Version as gcc and cc are not working Thanks!!!! (4 Replies)
Discussion started by: shivu
4 Replies

5. Solaris

Audit in Solaris Servers.

Hi Friends I am a Solaries newbie and I am looking out for a software or command or config that can capture all commands run by all users on a server on a daily basis. I believe that this Audit is being done in almost all enterprises and would like to know how the same is done there. Any... (3 Replies)
Discussion started by: Hari_Ganesh
3 Replies

6. Solaris

Solaris 10 Services - Audit and Closure

Hello We have recently been through an audit of our solaris servers. All our solaris servers are running version 10. We have been told to close down all the services and we have closed what we could by using svcadm disable We only wish to let ssh and the ftp service to run. Below is a... (3 Replies)
Discussion started by: sollyshah
3 Replies

7. UNIX for Dummies Questions & Answers

Problem in GUI based program on Sun Solaris

Hello! I am trying to run a program which has used Xlib for its graphical user interface on Solaris through Common Desktop Environment(CDE). All I get is my three required widows open but all blank.They suppose to show some symbols, pictures ad buttons.In the command terminal the following... (1 Reply)
Discussion started by: asif92
1 Replies

8. Solaris

Enabling Solaris Audit log: Solaris 9

Dear All, I have one of my Servers, running Solaris 9. I wanna enable the Audit log enabling, the way I did in Solaris 10 Servers. After running, the bsmconv script, giving the reboots, modifying all the audit files in /etc/security, the audit is enabled, but the audit file which shall be... (3 Replies)
Discussion started by: sumeet1806
3 Replies

9. Solaris

Audit useradd/userdel - Solaris 11

Linux audits in syslog, any time a user is deleted or added. However, I'm running a Solaris11 VM, and find no such entries. How can I enable auditing for useradd and userdel? Oracle's documentation on managing the auditing service, has been of no assistance. Thanks. Customizing What Is... (7 Replies)
Discussion started by: Nvizn
7 Replies

10. Solaris

Audit not working on Solaris 10

hi, I enabled bsm modules (/etc/security/bsmconv) and rebooted Solaris 10. But service is going into maintenance state. I rebooted server and I see one error saying "sys/c2audit:audit_kssl() not defined properly". I am not sure, what it is indicating and how it should be fixed. Please suggest, how... (5 Replies)
Discussion started by: solaris_1977
5 Replies
TWPRINT(8)						      System Manager's Manual							TWPRINT(8)

NAME
twprint - Tripwire database and report printer SYNOPSIS
twprint { -m r | --print-report } [ options... ] twprint { -m d | --print-dbfile } [ options... ] [ object1 [ object2... ]] DESCRIPTION
Prints Tripwire database and report files in clear text format. Report Printing mode In Report Printing mode, twprint verifies and displays the contents of a Tripwire report file (.twr). If no report is specified on the command line, the report specified in the REPORTFILE variable in the configuration file will be used. By default, this value includes the date and time to the nearest second. Because this value is constantly changing, twprint may not be able to find the correct report file. For this reason, the (-r or --twrfile) flag should be used with the desired report name to print a specific report. Database Printing mode This option is used to print a Tripwire database file in human-readable (clear text) form. In Database Printing mode, twprint verifies and prints the contents of a specified database to stdout. If no database file is specified on the command line, the default database specified by the DBFILE variable in the configuration file is used. OPTIONS
Report printing mode: -m r --print-report -v --verbose -s --silent, --quiet -c cfgfile --cfgfile cfgfile -r report --twrfile report -L localkey --local-keyfile localkey -t { 0|1|2|3|4 } --report-level { 0|1|2|3|4 } -m r, --print-report Mode selector. -v, --verbose Verbose output mode. Mutually exclusive with (-s). -s, --silent, --quiet Silent output mode. Mutually exclusive with (-v). -c cfgfile, --cfgfile cfgfile Use the specified configuration file. -r report, --twrfile report Print the specified report file. -L localkey, --local-keyfile localkey Use the specified local key file to perform verification with reports which are signed. -t level, --report-level level Specifies the detail level of the printed report, overriding the REPORTLEVEL variable in the configuration file. level must be a number from 0 to 4. Database printing mode: -m d --print-dbfile -v --verbose -s --silent, --quiet -c cfgfile --cfgfile cfgfile -d database --dbfile database -L localkey --local-keyfile localkey [ object1 [ object2... ]] -m d, --print-dbfile Mode selector. -v, --verbose Verbose output mode. Mutually exclusive with (-s). -s, --silent, --quiet Silent output mode. Mutually exclusive with (-v). -c cfgfile, --cfgfile cfgfile Use the specified configuration file. -d database, --dbfile database Print the specified database file. -L localkey, --local-keyfile localkey Use the specified local key file to read the database. [ object1 [ object2... ]] List of filesystem objects in the database to print. If no objects are specified, every object in the database will be printed. The format for a list of objects is: section: objname objname... section: objname... VERSION INFORMATION
This man page describes twprint version 2.4.1. AUTHORS
Tripwire, Inc. COPYING PERMISSIONS
Permission is granted to make and distribute verbatim copies of this man page provided the copyright notice and this permission notice are preserved on all copies. Permission is granted to copy and distribute modified versions of this man page under the conditions for verbatim copying, provided that the entire resulting derived work is distributed under the terms of a permission notice identical to this one. Permission is granted to copy and distribute translations of this man page into another language, under the above conditions for modified versions, except that this permission notice may be stated in a translation approved by Tripwire, Inc. Copyright 2000 Tripwire, Inc. Tripwire is a registered trademark of Tripwire, Inc. in the United States and other countries. All rights reserved. SEE ALSO
twintro(8), tripwire(8), twadmin(8), siggen(8), twconfig(4), twpolicy(4), twfiles(5) 1 July 2000 TWPRINT(8)
All times are GMT -4. The time now is 09:34 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy