[Fed-Talk] Auditing using Common Criteria
[Fed-Talk] Auditing using Common Criteria
- Subject: [Fed-Talk] Auditing using Common Criteria
- From: "EXT-Traynor, Paul I" <email@hidden>
- Date: Thu, 13 Sep 2007 10:24:12 -0500
- Thread-topic: Auditing using Common Criteria
We are in the process of seeking certification from our DAA for our
XServe (Intel) with 10.4.10 loaded, along with the Intel version of the
Common Criteria.
Our ISSO is trying to verify that all the required events are being
logged, but neither he nor I can seem to find the log entry for the user
logoff event.
We have checked the audit_classes file, and "lo" is present. We can see
logon events, but no logoff events.
Does anyone know if the system does record logoff events? If so, where?
Any help would be appreciated.
Thanks in advance.
R,
PT
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden