Go to main content

Securing Users and Processes in Oracle® Solaris 11.4

Exit Print View

Updated: September 2018
 
 

Modifying Logging Policy

This section assumes that you have completed New Feature – Enabling the account-policy Service.

The following command displays the logging policy variables as SMF properties. Note that the properties are in two stencils:

login/log/syslog boolean
login/log/syslog_failed_attempts count
su/log/device astring
su/log/logfile astring
su/log/syslog boolean

The following command enables the logging policy for syslog to be set:

$ pfexec svccfg -s account-policy \
setprop config/etc_default_login/disabled boolean true

The following command enables the logging policy for su to be set:

$ pfexec svccfg -s account-policy \
setprop config/etc_default_su/disabled boolean true

For the effects of changing the values of logging properties, see the account-policy(8S) man page.