The following tasks are the responsibility of the system administrator. Follow the Solaris instructions, but use the Trusted Extensions administrative tools.
Task |
For Solaris Instructions |
Trusted Extensions Instructions |
---|---|---|
Create audit partitions and an audit administration server, export audit partitions, and mount audit partitions. Create an audit_warn alias. |
Configuring and Enabling the Audit Service (Tasks) in System Administration Guide: Security Services |
Perform all administration in the global zone. Use the trusted editor. |
Copy or loopback mount customized audit files to labeled zones. |
Configuring the Audit Service in Zones (Tasks) in System Administration Guide: Security Services |
Copy the files to the first labeled zone, then copy the zone. Or, loopback mount or copy the files to every labeled zone after the zones are created. |
(Optional) Distribute audit configuration files. |
No instructions |
See How to Copy Files From Portable Media in Trusted Extensions |
Manage auditing. |
Solaris Auditing (Task Map) in System Administration Guide: Security Services |
Ignore per-zone audit tasks. |
How to Select Audit Events From the Audit Trail in System Administration Guide: Security Services |
To select records by label, use the auditreduce command with the -l option. |