Re: Solaris Basic Security Module

From: Yago Jesus (yjesus@softhome.net)
Date: 09/18/02


From: Yago Jesus <yjesus@softhome.net>
To: focus-sun@securityfocus.com
Date: Wed, 18 Sep 2002 12:35:53 +0200

El Lun 16 Sep 2002 18:10, escribiste:
> Hello all,
>
> I was wondering if there is a quick way to check and see if the Sun
> Basic Security Module (BSM) has been enabled on a Solaris 8 box.
>
> Regards,
> Boutros

I shall recomend you to look for "audit" process and c2audit module

# uname -a
SunOS secsun8 5.8 Generic_108528-09 sun4u sparc SUNW,UltraAX-i2
# modinfo | grep -i audit
 34 1025dee7 11f8c 186 1 c2audit (C2 system call)
# ps -ef | grep audit
    root 304 1 0 Aug 29 ? 0:00 /usr/sbin/auditd