Re: [Fed-Talk] [Announce] Common Criteria Certification - Mac OS X 10.6 & Mac OS X Server 10.6
Re: [Fed-Talk] [Announce] Common Criteria Certification - Mac OS X 10.6 & Mac OS X Server 10.6
- Subject: Re: [Fed-Talk] [Announce] Common Criteria Certification - Mac OS X 10.6 & Mac OS X Server 10.6
- From: "Dan O'Donnell" <email@hidden>
- Date: Tue, 02 Feb 2010 07:38:22 -0800
- Thread-topic: [Fed-Talk] [Announce] Common Criteria Certification - Mac OS X 10.6 & Mac OS X Server 10.6
Title: Re: [Fed-Talk] [Announce] Common Criteria Certification - Mac OS X 10.6 & Mac OS X Server 10.6
Default configuration of audit_control in 10.6 is:
#
# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_control#8 $
#
dir:/var/audit
flags:lo,aa
minfree:5
naflags:lo,aa
policy:cnt,argv
filesz:2M
expire-after:10M
On 2/1/10 1:38 PM, "Todd Heberlein" <email@hidden> wrote:
Shawn, et al.,
On page 64 of the CommonCriteriaAdminGuide.pdf is the following text regarding auditing:
Default
The following settings appear in the default audit_control file:
dir:/var/audit flags:lo,ad,-all,^-fc,^-cl
minfree:20
naflags:lo
I don't remember that being the default settings for my audit_control file. I have monkeyed around with mine so much over the months, I was wondering if someone could confirm whether this is their default settings.
Thanks,
Todd
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden
__________________________________________________________________________
This email message is for the sole use of the intended recipient(s) and
may contain confidential information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply email and destroy all copies
of the original message.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden