Planning Auditing

Planning auditing can require extensive knowledge. Trusted Solaris Audit Administration describes in detail how to set up auditing.

Auditing Security Information

Auditing security decisions include:

• Classes of events to audit for success

• Classes of events to audit for failure

• Classes of events to audit for both

• Users/roles with what additional auditing

• Who has access to the audit administration server

• Who has access to the audit servers

• Who has the rights profile for audit file backup

• Who has the rights profile for audit file review

Auditing System Information

Auditing system decisions include:

• Primary and secondary audit partitions for each workstation

• Size of audit partitions