Re: [Fed-Talk] [Announce] Common Criteria Certification - Mac OS X 10.6 & Mac OS X Server 10.6
Re: [Fed-Talk] [Announce] Common Criteria Certification - Mac OS X 10.6 & Mac OS X Server 10.6
- Subject: Re: [Fed-Talk] [Announce] Common Criteria Certification - Mac OS X 10.6 & Mac OS X Server 10.6
- From: "Shawn A. Geddis" <email@hidden>
- Date: Fri, 05 Feb 2010 17:36:40 -0500
Confirming Dan's statement here for those who still needed that... with respect to the default "audit_control" contents....
-Shawn
On Feb 2, 2010, at 10:38 AM, Dan O'Donnell wrote:
Default configuration of audit_control in 10.6 is:
#
# $P4: //depot/projects/trustedbsd/openbsm/etc/audit_control#8 $
#
dir:/var/audit
flags:lo,aa
minfree:5
naflags:lo,aa
policy:cnt,argv
filesz:2M
expire-after:10M
On 2/1/10 1:38 PM, "Todd Heberlein" <email@hidden> wrote:
Shawn, et al.,
On page 64 of the CommonCriteriaAdminGuide.pdf is the following text regarding auditing:
Default
The following settings appear in the default audit_control file:
dir:/var/audit flags:lo,ad,-all,^-fc,^-cl
minfree:20
naflags:lo
I don't remember that being the default settings for my audit_control file. I have monkeyed around with mine so much over the months, I was wondering if someone could confirm whether this is their default settings.
Thanks,
Todd
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden
__________________________________________________________________________
This email message is for the sole use of the intended recipient(s) and
may contain confidential information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply email and destroy all copies
of the original message.
- Shawn ________________________________________ Shawn Geddis T (703) 264-5103 Security Consulting Engineer C (703) 623-9329 Apple Enterprise Division email@hidden11921 Freedom Drive, Suite 600, Reston VA 20190-5634
|
Attachment:
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden