Re: OS account report



On Sun, 2008-03-16 at 21:41 -0700, mom wrote:
Does anybody know of an existing script/package to generate a report
like this:

We need a copy of an OS account audit report. This report will include
a status review of all currently open accounts on all Linux systems,
when those accounts were activated, who created them, what they are
allowed to access, and what their privilege levels are.

We have 200 linux servers so obviously we need a way to automate
this. :)

Well... what mechanism do you use to automate the creation of users
across those 200 hosts? You need to hook your accounting into that.
With regards to the past, if you were not tracking who did what
as root... there's no good way of doing that for the past.

Privilege levels in *ix are site defined (mostly). Btw, they are
site defined (mostly) in Windows now as well, just that most
are clueless about it.

So... the truth is... can't be done (by default).

However, you can tweak your own processes and security
policies to enable some of this kind of tracking for
future build outs.


.



Relevant Pages

  • Re: spyware/malware and linux?
    ... > How vulnerable is Linux to spyware, malware, trojans, etc. compared to ... > much about linux security or vulnerability, ... a pristine browser setup. ... All browser accounts have bogas email addresses. ...
    (comp.os.linux.security)
  • Re: open source user audit software ??
    ... so there is one for provisioning user accounts (Active ... > to create accounts in Active Directory as well as on Linux machines? ... The request goes to IT ...
    (Security-Basics)
  • Q: Network accounts problem
    ... We have a network of several SGI and Linux based machines, ... user accounts managed by a server running SuSE 9.1 pro, ... However the SGI machines notice the change straight away. ...
    (alt.os.linux.suse)
  • Re: Linux Fails at a Simple Task Once Again (k3b and Suse )
    ... >> Mark K. ... > an XP home computer I set up administrator accounts and normal user accounts. ... > Tried to install MS Flight Simulator 2004 as my son's ID. ... If I was as frustrated by Linux to the degree that you claim to be I'd ...
    (alt.os.linux.suse)
  • Re: Linux Fails at a Simple Task Once Again (k3b and Suse )
    ... an XP home computer I set up administrator accounts and normal user accounts. ... Tried to install MS Flight Simulator 2004 as my son's ID. ... If I was as frustrated by Linux to the degree that you claim to be I'd ...
    (alt.os.linux.suse)