OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Darren Moffat (Darren.Moffateng.sun.com)
Date: Wed Feb 06 2002 - 18:23:39 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    >- Anyone has existing code which goes through the process list and changes
    >the audit options? [ Search on google turned up only man pages :-) ]

    Of the top of my head:

    flags=`awk -F: '/flags/ {print $2}' /etc/security/audit_control`
    cd /proc
    for i in * ; do
            auditconfig -setpmask $i $flags
    done 

    --
Darren J Moffat