Oracle Solaris Trusted Extensions Administrator's Procedures

Audit Tasks of the System Administrator

The following tasks are the responsibility of the system administrator. Follow the Solaris instructions, but use the Trusted Extensions administrative tools.

Task 

For Solaris Instructions 

Trusted Extensions Instructions 

Create audit partitions and an audit administration server, export audit partitions, and mount audit partitions. 

Create an audit_warn alias.

Configuring and Enabling the Audit Service (Tasks) in System Administration Guide: Security Services

Perform all administration in the global zone. 

Use the trusted editor. 

Copy or loopback mount customized audit files to labeled zones. 

Configuring the Audit Service in Zones (Tasks) in System Administration Guide: Security Services

Copy the files to the first labeled zone, then copy the zone. 

Or, loopback mount or copy the files to every labeled zone after the zones are created. 

(Optional) Distribute audit configuration files. 

No instructions 

See How to Copy Files From Portable Media in Trusted Extensions in Oracle Solaris Trusted Extensions Configuration Guide

Manage auditing. 

Solaris Auditing (Task Map) in System Administration Guide: Security Services

Ignore per-zone audit tasks. 

Select audit records by label.

How to Select Audit Events From the Audit Trail in System Administration Guide: Security Services

To select records by label, use the auditreduce command with the -l option.