Setting auditing parameters
Settable parameters for auditing are found in the
/etc/default/audit
file.
This file contains the following parameters:
AUDIT_LOGERR-
The value of this parameter controls the action taken if there is any
error involving the auditing subsystem.
AUDIT_LOGFULL-
The value of this parameter controls the action taken when
the audit event log file becomes full.
AUDIT_PGM-
This parameter defines the absolute path name to an executable
file that will be executed every time a switch to a different log file occurs.
AUDIT_DEFPATH-
This parameter defines the absolute path name of the directory
for the audit event log files.
The value for this parameter upon initial installation is
/var/audit.
AUDIT_NODE-
This parameter defines the node name to be appended to the system generated
audit event log file name.
``Configuring auditing''
provides detailed instructions
on how to set the values of these parameters.
© 2004 The SCO Group, Inc. All rights reserved.
UnixWare 7 Release 7.1.4 - 22 April 2004