To Mount an Audit File System

1. As role admin at label admin_low, on audubon, the audit administration server, create a mount point for every audit directory in the Trusted Solaris network.

   For example, on the audit administration server audubon:

   audubon$ mkdir /etc/security/audit/willet audubon$ mkdir /etc/security/audit/egret audubon$ mkdir /etc/security/audit/egret.1 …

2. As role admin, at label admin_low, enter every audit partition on the network in the audit administration server's vfstab(4) file.

   Mount audit directories with the read-write (rw) option. Mount remote partitions using the soft option.

   1. Click the Application Manager, double-click the System_Admin folder, and double-click the Set Mount Points action.

   2. Enter the mount points in the vfstab(4) file.

      The following shows part of the vfstab file on audubon:

      # egret is the main audit file server
      egret:/etc/security/audit/egret - /etc/security/audit/egret nfs - yes bg,soft,nopriv
      egret:/etc/security/audit/egret.1 - /etc/security/audit/egret.1 nfs - yes bg,soft,nopriv
      egret:/etc/security/audit/egret.2 - /etc/security/audit/egret.2 nfs - yes bg,soft,nopriv
      egret:/etc/security/audit/egret.3 - /etc/security/audit/egret.3 nfs - yes bg,soft,nopriv
      willet:/etc/security/audit/willet - /etc/security/audit/willet nfs - yes bg,soft,nopriv
      …

3. On each system, create the mount points for the remote audit file servers' partitions that are used by the system, and enter them in the vfstab(4) file. Do this as role admin, at label admin_low.

   For example, to create the mount points on the system willet:

   willet$ mkdir /etc/security/audit/egret willet$ mkdir /etc/security/audit/audubon.2

   1. Click the Application Manager, double-click the System_Admin folder, and double-click the Set Mount Points action.

   2. Enter the mount points in the vfstab(4) file.

      The following shows part of the vfstab file on willet:

      # egret is the main audit file server
      egret:/etc/security/audit/egret - /etc/security/audit/egret nfs - yes bg,soft,nopriv
      # audubon is the audit administration server
      audubon:/etc/security/audit/audubon.2 - /etc/security/audit/audubon.2 nfs - yes nopriv