Should I use the Audit_Warn Feature for what I need

Very new to Solaris. I'm currently using Solairs 10 (X86).
Can the audit_warn feature notify me via mail if the below would happen? Note: I have no hard or soft limit.
If someone (root maybe) stoped the auditd service or the audit dameon stoped working because someone pefromed an activity that had a negative impact on the auditd service.
As I understand the audit_warn can cause alot of mail traffic. It is recommended that mail not be sent every time as this could result in a the saturation of the file system that contains the mail spool directory.
Maybe the simple solution is a "if then" scenioro? Somthing like if the auditd service stops then notify root. Not sure if this is somthing you setup in the /etc/syslog.conf or is there another file?
Take care,
Johnny Mac

I'm responding to the post indicated in the header of this post, though I beleive I am repeating semantics.
The auditd daemon calls the */../../audit_warn* 'script', under certain conditions... these conditions are defined for it via the audit_control file. Populating the audit_control file with the conditions which you desire the auditd daemon to consider, requires that you create "audit-flags" , and put them in a flags line like:
flags:_audit-flags_ .
Get familiar with man page format... it can be your friend.
If the page is too long then try this : [mo is the name of the file which is made in the local directory]
bash# man audit_control > mo
Reformating page...
bash#*cat -n mo*
this will number the lines
bash#*cat -n mo | grep flags*
this will give you numbered lines with the word patterns you are looking for.
Then scroll down to the line number and read around it.
you might want to make a numbered file of the man page for convenience :
bash#*cat -n mo > mor*
You might bump into the more command... if you are not wary.
You might want to peruse the audit_user man page at some point too, but conceptually I think my work is done.
As for the misleading someone , read "process". This auditing feature seems like a powerful way of identifying where the tentacles are meterialising... if not from who's grammar.
Edited by: plasmichive on Feb 24, 2010 2:09 AM
More on context:
I read that the allhard option of */../../audit_warn* is used [by the auditd daemon, under default conditions] to mail only when the hard limit is exceeded for the first time [count = 1];BUT as the count increases, console messages are sent, but no mail. This prevents mail overload, but keeps the console flashing.

Similar Messages

  • I've been using the speaker feature for dictation. Suddenly it's not working. Any ideas?

    I've been using the speaker feature for dictation. Suddenly it's not working. Any ideas?

    Please follow this article:
    http://support.apple.com/kb/TS1567
    it should help
    let me know

  • When I try to use the customize feature for toolbars, the toolbars themselves disappear as soon as I click "customize." Ideas?

    When I try to use the customize feature for toolbars, the toolbars themselves disappear as soon as I click "customize." This happens whether I choose "customize" from the drop-down menu, or use the "control-click" option. I don't remember having this problem before, since I've customized the toolbar previously, although not for a while.
    I'm running Firefox 17.0 on an iMac with OS 10.6.8

    Hello rheahirshman
    check it in [https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-using-safe-mode#os=mac&browser=fx17 Safe Mode], in Safe Mode window select '''''"Start in Safe Mode"''''' and see if this happen again, '''''if not''''' see: [https://support.mozilla.org/en-US/kb/troubleshoot-extensions-themes-to-fix-problems#os=mac&browser=fx17 Troubleshoot extensions, themes and hardware acceleration issues to solve common Firefox problems]
    thank you
    Please mark "Solved" the answer that really solve the problem, to help others with a similar problem.

  • I bought one Iphone a 3 weeks ago and I can´t listen what people speak with me, because de microphone doesn´t work, I need  to use the speaker, somebody know what I need to do?

    I bought one Iphone a 3 weeks ago and I can´t listen what people speak with me, because de microphone doesn´t work, I need  to use the speaker, somebody know what I need to do?

    Just thought that I'd report that I've decided on my solution.
    It seems that just making do with what I can find on the US store is the easiest and perhaps also the best way of going about it. All other methods mean trouble. I'm lucky that China hasn't outright blocked the US store, as they HAVE blocked iTunes music store in China already (something about a song about Tibet caused them to block the store entirely).
    So yeah, just going to deal with it I guess. I should be grateful I'm getting anything at all, considering the country I'm in. Still, I just feel so ripped off sometimes when I pay for expensive devices and I can't even get much out of them do to my region. iPhones cost around $700 in China because there's no company like AT&T that you can just sign a contract with to get one, so you have to pay up-front for the phone, and get less features out of it in the end. Makes buying smart phones look like a waste of time and money sometimes, since you can't use the device to do what it was built to do due to censorship and not having any content for your region (though they do have a lot of Chinese apps that I can't use due to not knowing Chinese).

  • Why can't I use the landscape feature for iPhone 5? It only works in limited apps. I feel as though I wasted my money since I prefer to use my phone in landscape mode.

    Why can't I use the landscape feature in all of the apps? It seems like a waste of money since I prefer to use the landscape feature.

    It is up to the app developer to decide if the app should work in landscape mode or not. This is also true on Android phones, by the way.

  • Using the controller feature for video media (Flash Export)

    I created an interactive file in InDesign with the hope of exporting it into flash to embed in my website. Everything works, except even though I have the controller set to on and to appear when you roll-over the window, the controller does not show up. The video is embedded using a URL, and the video will still play, but for some reason the controller feature just won't show up... Anyone have any ideas?

    If you use video in your InDesign SWF, even one from URL, InDesign exports resources folder to the same place with actual SWF. Inside that resources folder there´s a skin of the video player you chose for you video. When you upload main SWF to your server, you need to upload that resources folder as well. Because if you don´t, flash player never finds that skin and therefore can´t show any controls...
    Here´s a screenshot of my main SWF (videotest.swf) I exported from InDesign. Because I placed a video from URL there, InDesign created videotest_Resources folder and inside of it there is SkinOverAll.swf... If I want everything to work smoothly, I need to upload them all.

  • Did you know that using the erase feature for stolen iPads can fail? Mine did and was not detected for 10days.

    Thursday(day 1):Had an iPad2 wifi only which I rarely used, stolen.
    minutes later, pulled up findmyphone on iCloud and put a lock on iPad and then erased the iPad.
    Sunday(day4) : I noted websites opened on my iphone that I had not opened.
    Monday: Spooked, I went to genius bar was informed that it would have been wiped since the thief had been hooked to wifi and thus the iPad would have been erased.
    Sunday(day 11), my iCal has been deleted totally from all my devices (iMac, iPhone, MacAir)
    Monday (day12): I go to genius bar with Time Machine backup drive and some magic is worked to recover it. The conclusion was that the thief of my iPad wiped it out. And, " there are always ways to get into the iPad if they really want to with firewalls etc....".  And I needed to change my iCloud password (which the first guy did not suggest and stupidly I did not presume I needed to do).
    Monday: (day 12) Password changed. OK, done.
    Wednesday (day14): I open my photo stream on the iphone and see screen shots of websites dated from as recently as day 10! These of course showed up on my iMac and my iPhone amongst my own photo shots. Talk about feeling violated and failed.
    Moral of story: Can not trust that the erase feature works.
                              Change every single  password you have as there is not assurance that a track has not been made.
                              And, do not have more than one user on your device: such as your spouse as their stuff could be compromized too.

    The pages panel is not the place where you see this information.  You can customize the Links panel to show all sorts of things, including the page number, effective and actual ppi, and whether the link is OK or needs updating.

  • Cannot log onto gmail using the mail feature for ipad mini, ipad or iphone.

    This started happening yesterday.  It affected my Iphone ipad mini and Ipad at the same time.   I thought someone hacked my account so I changed my passwords, confirmed my setting but still Mail says the settings are wrong.  Is anyone else experienceing this problem?

    iOS: Unable to send or receive email
    http://support.apple.com/kb/TS3899
    Can’t Send Emails on iPad – Troubleshooting Steps
    http://ipadhelp.com/ipad-help/ipad-cant-send-emails-troubleshooting-steps/
    Setting up and troubleshooting Mail
    http://www.apple.com/support/ipad/assistant/mail/
    Server does not allow relaying email error, fix
    http://appletoolbox.com/2012/01/server-does-not-allow-relaying-email-error-fix/
    Why Does My iPad Say "Cannot Connect to Server"?
    http://www.ehow.co.uk/info_8693415_ipad-say-cannot-connect-server.html
    iPad Mail
    http://www.apple.com/support/ipad/mail/
    Try this first - Reset the iPad by holding down on the Sleep and Home buttons at the same time for about 10-15 seconds until the Apple Logo appears - ignore the red slider - let go of the buttons. (This is equivalent to rebooting your computer.)
    Or this - Delete the account in Mail and then set it up again. Settings->Mail, Contacts, Calendars -> Accounts   Tap on the Account, then on the red button that says Remove Account.
     Cheers, Tom

  • Does anyone know how many kilobytes pixie plus runs??? i want to use the hotspot feature for netflix and playstatio​n3...i need to know before i sign up and spend money on it! thank you

    i need to know if palm pixie plus runs with 500 kilobytes or more  please some one HELP MEEEE
    Post relates to: Pre Plus p101vzw (Verizon)

    Sorry, your question isn't very clear... What are you asking?
    - what storage capacity does the phone have?. (8gb, 7 available to user)
    - will the phone run if it has only 500kb free?. (doubtful)
    - is it possible to stream netflix through your Pixi to your PS3? (doubtful again).  You would have to be getting a strong 3g signal and then figure out how to get netflix to work. 
    If I were you, I'd search for this answer over at PreCentral.net.  I got zero hits for "Netflix" in the Pixi board.  Many users were using "FreeTether" instead of the VZW app.
    WyreNut 
    I am a Volunteer here, not employed by HP.
    You too can become an HP Expert! Details HERE!
    If my post has helped you, click the Kudos Thumbs up!
    If it solved your issue, Click the "Accept as Solution" button so others can benefit from the question you asked!

  • Problem using the Book feature for first time.

    Created and saved a book no problem. How can I add a new image to a saved book? When the book is open the filmstrip only shows images in the book. I originally loaded my shortlisted images in a collection. I've added additional images to the collection but can't access them from the Book module. Any suggestions gratefully received.
    LR5.3 running under W7
    Thanks
    Alun

    How about this:
    * open your Book document, and open a document from within it.
    * hide all palettes with the Tab key.
    * edit your document, close and save it.
    * show all palettes with the Tab key.
    Now ID will insist the document has changed "outside" the Book! It took me a while to find out why the heck ... just because the Book palette was not visible.
    Fortunately, you can safely ignore the warning for this scenario.

  • Is this the right router for what I need?

    First of all I apologize if this is the wrong forum to post this question. I am looking for a Cisco router that can host a vpn. I dont know if this makes sense but I want to be able to access files on a NAS while out of the network using my iPhone and iPad. I was told that the safest way woudl be to setup a VPN. I dont want to have to set one up using my computer I want it to be free standing and be able to access the NAS away from the network. I was told that I would need a router that would host not allow passthrouhg. I found this router Linksys WRVS4400N, does this router support or host VPN? Thanks in advance for any help possible.

    These products are being handled by the Cisco Small Business Support Community. (URL: https://supportforums.cisco.com/community/netpro/small-business)

  • We have 4 iphones in our family and an Ipad.  When we purchase music I would like for the entire family to be able to use it.  Should each of us use a different apple account or should we use the same one.

    We have 4 iphones and an Ipad in our family. When we purchase music, I would like for the entire family to be able to use it and then back it up to Icloud. What is the best and cheapest way for this to happen.  Should we all have a different apple id or should we use the same one.

    You will all need to be on the same itunes account ID.
    You can however all have seperate icloud accounts aswel.

  • When Should I use the Inner Classes ?

    When Should I use the Inner Classes ?
    What is the advantage(s) and the disadvantage(s) ?

    When I use innerclasses?
    1) Allmost allways when I need simple owner child behavior.
    2) When I need a behaviour, that is quite small, and used only once, I make it anonymous inner class. For example specialised streams and threads.
    3) Enumerations

  • I want to use the Maps feature on my X3

    I purchased a Nokia X3 two weeks ago.
    I would like to use the Maps feature for work purposes.
    According to the Nokia website this mobile has Nokia Maps preinstalled (reference http://europe.nokia.com/support/product-support/compatibility-and-download#/nokia-x3/)
    So why am I required to purchase an External Bluetooth GPS module?
    The website clearly states “You’re good to go. Your mobile has Nokia Maps preinstalled. You can now find the good places to know and the best way to go in over 180 countries worldwide.”
    Which device is compatible with the X3 handset?

    The X3 comes with the Nokia Maps software preinstalled but it does not have an integrated gps chip like some of the other models.
    You can still use the software to browse maps and plan journeys but you won't be able to use it for live turn by turn directions becuase it does not have the gps chip to tell it your current position. To do that you need to get an external bluetooth gps receiver chip such as the Nokia LD-4W. Cheaper alternatives are available from online shops.

  • Hi - just using the new iMovie for the first time - apparently there should be a sidebar containing tools like "Content Library". Not on mine - even in Window view, Content Library features like text etc are all greyed out - obviously it's me - help?

    Hi - just using the new iMovie for the first time - apparently there should be a sidebar containing tools like "Content Library". Not on mine - even in Window view, Content Library features like text etc are all greyed out - obviously it's me - anyone help please?

    Sorry - I should have added that I have imported a Quicktime movie, originally created as an iPhoto slideshow.
    I want to create rolling credits at the movie end and apparently you can only do this using iMovie - can you help please?

Maybe you are looking for