JavaScript is required to for searching.
Skip Navigation Links
Exit Print View
Oracle VM Server for SPARC 2.0 Administration Guide
search filter icon
search icon

Document Information

Preface

1.  Overview of the Oracle VM Server for SPARC Software

2.  Installing and Enabling Software

3.  Security

Logical Domains Manager Authorization

Creating Authorization and Profiles and Assigning Roles for User Accounts

Managing User Authorizations

Add an Authorization for a User

Delete All Authorizations for a User

Managing User Profiles

Add a Profile for a User

Delete All Profiles for a User

Assigning Roles to Users

Create a Role and Assign the Role to a User

Configuring RBAC for Guest Console Access

Enabling and Using BSM Auditing

Enable BSM Auditing

Verify That BSM Auditing Is Enabled

Disable BSM Auditing

Print Audit Output

Rotate Audit Logs

4.  Setting Up Services and the Control Domain

5.  Setting Up Guest Domains

6.  Setting Up I/O Domains

7.  Using Virtual Disks

8.  Using Virtual Networks

9.  Migrating Domains

10.  Managing Resources

11.  Managing Configurations

12.  Performing Other Administration Tasks

A.  Oracle VM Server for SPARC Physical-to-Virtual Conversion Tool

B.  Oracle VM Server for SPARC Configuration Assistant

C.  Logical Domains Manager Discovery

D.  Using the XML Interface With the Logical Domains Manager

E.  Logical Domains Manager XML Schemas

Glossary

Index

Enabling and Using BSM Auditing

The Logical Domains Manager uses the Oracle Solaris OS Basic Security module (BSM) auditing capability. BSM auditing provides the means to examine the history of actions and events on your control domain to determine what happened. The history is kept in a log of what was done, when it was done, by whom, and what was affected.

To enable and disable this auditing capability, use the Oracle Solaris OS bsmconv(1M) and bsmunconv(1M) commands. This section also includes tasks that show how to verify the auditing capability, print audit output, and rotate audit logs. You can find further information about BSM auditing in the Solaris 10 System Administration Guide: Security Services.

Enable BSM Auditing

  1. Add vs in the flags: line of the /etc/security/audit_control file.
  2. Run the bsmconv(1M) command.
    # /etc/security/bsmconv

    For more information about this command, see the bsmconv(1M) man page.

  3. Reboot the Oracle Solaris OS for auditing to take effect.

Verify That BSM Auditing Is Enabled

  1. Type the following command.
    # auditconfig -getcond
  2. Check that audit condition = auditing appears in the output.

Disable BSM Auditing

  1. Run the bsmunconv command to disable BSM auditing.
    # /etc/security/bsmunconv

    For more information about this command, see the bsmunconv(1M) man page.

  2. Reboot the Oracle Solaris OS for the disabling of auditing to take effect.

Print Audit Output

Rotate Audit Logs