[Fed-Talk] Audit solutions
[Fed-Talk] Audit solutions
- Subject: [Fed-Talk] Audit solutions
- From: "Traynor, Paul I" <email@hidden>
- Date: Fri, 31 Jul 2009 10:52:49 -0500
- Thread-topic: Audit solutions
Hello all,
We have several XServe units running 10.4.11 with Common Criteria Tools
installed. Our ISSO has been reporting that auditd has been dying on
machines in an apparently non-random way. Specifically, one set of
machines will all stop producing logs at the same time, and another set
will all stop at some other time. In any case, we believe that some
other process that runs at a specific time is causing auditd to stop
logging. The only way we know to restart auditing is to restart auditd
or reboot the machines.
My question is this: Is anyone else seeing this behavior on their boxes
with the Common Criteria Tools installed, and can anyone who is using
OpenBSM instead provide any input as to the reliability of that
alternative? Maybe someone can recommend yet another alternative that
is fully functional?
Thanks in advance for any help at all.
R,
PT
----------------------------------------------------------------
Paul I. Traynor
T&E Engineering
Network Design and Analysis Engineer
MailTo:email@hidden
Phone: (256) 461-3495
----------------------------------------------------------------
FOR OFFICIAL USE ONLY
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden