Solaris 9 8/03 Updates

• Public files are no longer audited for read-only events. The -public option to the auditconfig command controls whether public files are audited. By not auditing public files, the audit trail is greatly reduced. Attempts to read sensitive files are therefore easier to monitor. See BSM Terminology.

• The praudit command has an additional output format, XML. The XML format enables the output to be read in a browser, and provides source for XML scripting for reports. The -x option to the praudit command is described in The praudit Command.

• The default set of audit classes has been restructured. Audit meta-classes provide an umbrella for finer-grained audit classes. See Definitions of Audit Flags.

• The bsmconv command no longer disables the use of the Stop-A key. The Stop-A event is now audited to maintain security.