Sponsored Content
Full Discussion: audit user in BSM/C2 Log
Special Forums Cybersecurity audit user in BSM/C2 Log Post 302544461 by BERNIELEE68 on Wednesday 3rd of August 2011 10:41:14 PM
Old 08-03-2011
Thanks. Found out from unix admin that some of the 'jobs' are using cfengine (which i'm not familiar with). Other than those you suggested checking - anything else if using cfengine?
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

audit user activity - possible?

Hi, I have been asked if it is possible to track the last time a specific user logged in to the sysetm. checked my documentation but can't see it there - google is not being very helpful either. I wonder if someone here can help - it will be much appreciated. Thanks Suresh (1 Reply)
Discussion started by: sureshy
1 Replies

2. Solaris

Solaris BSM log software

I'm looking for a software to capture my systems logs, and bsm (basic security module) logs to centralise the administration. Do you have a suggestions. Opensource or not. (6 Replies)
Discussion started by: simquest
6 Replies

3. Programming

how to write to Solaris BSM log

I have a C program and want to write messages to a log. BSM is being used for O/S auditing. Can I write my messages to the BSM log? If so, how do I do that? I'm not finding any API's for that. Any URLs, samples, guidance would be appreciated. (0 Replies)
Discussion started by: JDO
0 Replies

4. Solaris

Solaris BSM audit log

I got a lot of this message in my /var/audit log how can I exclude this message? header,127,2,invalid event number,fe,hostsol1.com.sg,2007-12-21 00:10:01.001 +08:00,argument,1,0x5,processor ID,argument ,2,0x3,flag,text,P_STATUS,subject,zhang1,root,root,root,root,18228,576129155,291 131094... (1 Reply)
Discussion started by: geoffry
1 Replies

5. UNIX for Advanced & Expert Users

audit user commands of different users under root account

Hi, I would like to know if there is anyway that I can pinpoint the user before/after he connects to the root? Also, I'm trying to find out what are the commands he inputs under root access. (6 Replies)
Discussion started by: pointgetter0
6 Replies

6. Solaris

BSM auditing issues, need to audit "permission denied"

Let me preface with I am semi-new to Solaris. I work with it in the labs at work and that's about my extent (although I run Linux at home). Well, a week ago security comes around with updated requirements, some of which are the need to audit all failures. For the life of me I cannot get a... (0 Replies)
Discussion started by: mph275
0 Replies

7. AIX

When AIX audit start, How to set the /audit/stream.out file size ?

Dear All When I start the AIX(6100-06)audit subsystem. the log will save in /audit/stream.out (or /audit/trail), but in default when /audit/stream.out to grow up to 150MB. It will replace the original /audit/stream.out (or /audit/trail). Then the /audit/stream.out become empty and... (2 Replies)
Discussion started by: nnnnnnine
2 Replies

8. Cybersecurity

Audit on specific user in linux

Hi All, Please let me how to enable user specific audit in Linux server. Say i have specific user namely admin1,admin2,admin3 apart from the normal users, user1,2,3.....userN. How to enable audit for users admin1,admin2 and admin3 alone. Also please let me know, if this would have any... (4 Replies)
Discussion started by: pradebban
4 Replies

9. Shell Programming and Scripting

Audit user activity

Need some help in coming up to log all the activity that is used with our common "unix account". Ideally I am looking for to log the activity in a "separate" file for each session or login until the user logout, I would like to capture the date/time and terminal login and record all the ... (3 Replies)
Discussion started by: rajmanna
3 Replies

10. Solaris

How can I read Solaris BSM log?

Hi all, I'm trying to read Solaris BSM log in user friendly form. Found old tools including bsmparser java tool and php code. But none of them working. What are you using for parsing BSM log? (2 Replies)
Discussion started by: sembii
2 Replies
cf-agent(8)						      System Manager's Manual						       cf-agent(8)

NAME
cf-agent - cfengine's change agent SYNOPSIS
: cf-agent [options] DESCRIPTION
: The main Cfengine agent is the instigator of change in the system. In that sense it is the most important part of the Cfengine suite. cfengine is a self-healing configuration and change management based system. You can think of cfengine as a very high level language, much higher level than Perl or shell. Asingle statement is called a promise, and compliance can result in many hundreds of filesbeing created, or the permissions of many hundreds offiles being set. The idea of cfengine is to create a one or more sets of configuration files which willclassify and describe the setup of every host in a network. COMMAND LINE OPTIONS
: --bootstrap, -B Bootstrap/repair a cfengine configuration from failsafe file in the WORKDIR else in current directory --bundlesequence, -b Set or override bundlesequence from command line --debug, -d Set debugging level 0,1,2 --define, -D Define a list of comma separated classes to be defined at the start of execution --diagnostic, -x Do internal diagnostic (developers only) level in optional argument --dry-run, -n All talk and no action mode - make no changes, only inform of promises not kept --file, -f Specify an alternative input file than the default --help, -h Print the help message --inform, -I Print basic information about changes made to the system, i.e. promises repaired --negate, -N Define a list of comma separated classes to be undefined at the start of execution --no-lock, -K Ignore locking constraints during execution (ifelapsed/expireafter) if "too soon" to run --policy-server, -s Define the server name or IP address of the a policy server (for use with bootstrap) --verbose, -v Output verbose information about the behaviour of the agent --version, -V Output the version of the software AUTHOR
Mark Burgess and CFEngine AS INFORMATION
Bug reports: http://bug.cfengine.com, .PP Community help: http://forum.cfengine.com Community info: http://www.cfengine.com/pages/community Support services: http://www.cfengine.com This software is Copyright (C) 2008-2013 CFEngine AS. Maintenance Commands cf-agent(8)
All times are GMT -4. The time now is 10:18 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy