Tru64 Gurus,
I have a unique question about the logging of rsh events. I
recently wrote a ksh script that makes an rsh call to expect on all of our
servers to remotely change passwords. The problem with this is that the rsh
call is getting logged (by syslogd in auth.log) along with the expect call
and the arguments, which happen to be the username and the password! The
security audit team had a field day with me! My question is this: I don't
want to eliminate the rsh entry from the audit logs but I would like to
eliminate, preferably, the arguments to the expect call, or, if need be,
eliminate the expect call and the parameters from the log. Is there a way
to do this? Thanks in advance.
Mike Mehall
SAP Basis Team
Northrop Grumman Corp.
410-765-0355
michael_r_mehall_at_mail.northgrum.com
Received on Fri Jan 18 2002 - 20:47:41 NZDT