SUMM: Auditors -- Enhanced Security! :(

From: Sheryl A. Campbell <campbell_at_lvc.edu>
Date: Thu, 10 Jul 1997 23:37:43 -0400 (EDT)

Hi all!

Well, thanks very much to our friends in Alaska:

Kurt Carlson <sxkac_at_java.sois.alaska.edu> and
"Randy M. Hayman" <haymanr_at_icefog.sois.alaska.edu>

I will paste my original question and their answers below.
=================================My Question====================================
The auditors have made their annual pilgrimmage and would like to know the
following:

Is there a way to generate a report from the enhanced security database of
users and their parameter settings?
--------------------------------------------------------------------------------

=============================Kurt's Answer======================================
What do you mean by parameter settings? If you mean environmental
variables, then "Yes" (sort of). Audit can be a very large consumer,
it should be configured very carefully... it took some trial and
error to enable a reasonable subset of options which wouldn't
flood our audit disk. The audit analysis tools is also a BIG
consumer of resources. All that being said, it can be useful...
we've used it several times to track down who (accidentally,
of course) files. If you would a copy of our authorization file
I can send it as well as some overview documentation of how to
analyze. kurt

_____________________________________________________________________
Kurt Carlson, University of Alaska SOIS/TS, (907)474-6266
sxkac_at_alaska.edu 910 Yukon Drive #105.63, Fairbanks, AK 99775-6200


==============================Randy's Answer====================================
Sheryl -

|>Is there a way to generate a report from the enhanced security database of
|>users and their parameter settings?

I've written a couple of utilities to do things like this, perhaps they will be
near what you need. user_report and user_list are their names, and they can
be found as part of the zuausr utiilties at:

ftp://raven.alaska.edu/pub/randy/zuausr/

Current version is 1.15.

Randy Hayman
haymanr_at_icefog.alaska.edu


Thanks again, guys! I will check them out soon! (How long can we put off the
auditors ... ? :)

        Sheryl

% % % % % % % % % % % % % % % % % % % % % % % % % % % % % % % % % % % %
% Sheryl A. Campbell Internet: campbell_at_lvc.edu %
% Assistant Director Voice: (717)867-6060 %
% Administrative Computing FAX: (717)867-6019 %
% %
% L E B A N O N V A L L E Y C O L L E G E %
% %
% DEC Unix 3.2d-1, Coll: Live 13.11, Dev 14.4, Ben: Live 4.3, Dev 4.3 %
% %
% Visit my Personal Web Page at %
% http://www.geocities.com/Heartland/Plains/4407/index.html %
% %
% Never underestimate the power of a smile! %
% % % % % % % % % % % % % % % % % % % % % % % % % % % % % % % % % % % %
Received on Fri Jul 11 1997 - 05:51:30 NZST

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:36 NZDT