Audit Administration Profiles

The Solaris operating environment provides profiles for configuring the audit service and for analyzing the audit trail.

• Audit Control – Profile that enables a role to configure Solaris auditing. The profile grants authorizations to configure auditing files and to run auditing commands. Roles with the Audit Control profile can run the following commands: audit, auditd, auditconfig, bsmconv, and bsmunconv.

• Audit Review – Profile that enables a role to analyze Solaris auditing records. The profile grants authorization to read audit records with the praudit and auditreduce commands. The role can also run the auditstat command.

• System Administrator – Profile that includes the Audit Review profile. A role with the System Administrator profile can analyze audit records.

To assign a profile to a role, see Creating Roles.