Trusted Solaris Audit Administration

To Mount an Audit File System

  1. As role admin at label admin_low, on audubon, the audit administration server, create a mount point for every audit directory in the Trusted Solaris network.

    For example, on the audit administration server audubon:


    audubon$ mkdir /etc/security/audit/willet
    audubon$ mkdir /etc/security/audit/egret
    audubon$ mkdir /etc/security/audit/egret.1
    ...

  2. As role admin, at label admin_low, enter every audit partition on the network in the audit administration server's vfstab(4) file.

    Mount audit directories with the read-write (rw) option. Mount remote partitions using the soft option.

    1. Click the Application Manager, double-click the System_Admin folder, and double-click the Set Mount Points action.

    2. Enter the mount points in the vfstab(4) file.

      The following shows part of the vfstab file on audubon:

      egret:/etc/security/audit/egret - 	/etc/security/audit/egret 	nfs 	- 	yes 	bg,soft,nopriv
      egret:/etc/security/audit/egret.1 - 	/etc/security/audit/egret.1 	nfs 	- 	yes 	bg,soft,nopriv
      egret:/etc/security/audit/egret.2 - 	/etc/security/audit/egret.2 	nfs 	- 	yes 	bg,soft,nopriv
      egret:/etc/security/audit/egret.3 - 	/etc/security/audit/egret.3 	nfs 	- 	yes 	bg,soft,nopriv
      willet:/etc/security/audit/willet - 	/etc/security/audit/willet 	nfs 	- 	yes 	bg,soft,nopriv
      ...
  3. On each workstation, create the mount points for the remote audit file servers' partitions that are used by the workstation, and enter them in the vfstab(4) file. Do this as role admin, at label admin_low.

    For example, to create the mount points on the workstation willet:


    willet$ mkdir /etc/security/audit/egret
    willet$ mkdir /etc/security/audit/audubon.2
    

    1. Click the Application Manager, double-click the System_Admin folder, and double-click the Set Mount Points action.

    2. Enter the mount points in the vfstab(4) file.

      The following shows part of the vfstab file on willet:

      egret:/etc/security/audit/egret - /etc/security/audit/egret nfs - yes bg,soft,nopriv
      audubon:/etc/security/audit/audubon.2 - /etc/security/audit/audubon.2 nfs - yes nopriv