How to Audit Changes in Device Policy

By default, the as audit class includes the AUE_MODDEVPLCY audit event.

You must become an administrator who is assigned the Audit Configuration rights profile. For more information, see Using Your Assigned Administrative Rights in Securing Users and Processes in Oracle Solaris 11.4.

1. Preselect the audit class that includes the AUE_MODDEVPLCY audit event.

   # auditconfig -getflags
   current-flags
   # auditconfig -setflags current-flags,as
   

   For detailed instructions, see How to Preselect Audit Classes in Managing Auditing in Oracle Solaris 11.4.