The question:
> Any advice on what events to audit and what not to audit? Out of the box,
> everything is turned on. I hadn't gotten to the point of looking into the
> subsystem, /var filled up and it shut my machine down. Figured out how to
> handle that part, but I'd like some advice on what to audit on success and
> failure. Comments?
>
Thanks to:
"Randy M. Hayman" <haymanr_at_icefog.sois.alaska.edu>
rnfrank_at_pierce.llnl.gov
Kurt Carlson <sxkac_at_java.sois.alaska.edu>
All three were kind enough to include their current audit set up and
provide some advice on how to configure the facility.
Jim
----
_______________________________________________________________________________
James C. Anderson PHONE: (216) 775-6929
Computer Systems Manager FAX: (216) 775-8573
Houck Computing Center Email: anderson_at_ocaxp1.cc.oberlin.edu
Oberlin College Home Page: http://www.oberlin.edu/~anderson/
Oberlin, OH 44074
_______________________________________________________________________________
Received on Wed May 21 1997 - 16:26:16 NZST