System Administration Guide: Security Services

How to Configure the audit_warn Alias

The audit_warn script generates mail to an alias called audit_warn. To send this mail to a valid email address, you can follow either of the following steps:

  1. Become superuser or assume an equivalent role.

  2. (Optional) Swap the audit_warn alias with another alias.

    One option is to edit the audit_warn script and replace audit_warn with another alias. After you swap audit_warn for root, the line that sends the email message would resemble the following:


        /usr/ucb/mail -s "$SUBJECT" root
    

    Ten lines in the script require this change.

  3. (Optional) Redirect the audit_warn email to another alias.

    The other option is to redirect the email in the /etc/mail/aliases file. In this case, you would add an alias similar to the following to the local /etc/mail/aliases file or to the mail_aliases database in the name space. The new entry would resemble the following if the email were to be redirected to the root alias:


    audit_warn: root