Which statement describes the user auuser audit mask?

Examine the following information:

Which statement describes the user auuser audit mask?

Examine the following information:

Which statement describes the user auuser audit mask?

A.
All failed and successful lo events, all failed and successful am events will be logged, no ss events will be
logged.

B.
All failed and successful lo events, all failed and successful am events and successful ss events will be
logged.

C.
All failed and successful lo events, all failed and successful am events and failed ss events will be logged.

D.
All failed and successful lo events and all failed and successful ss events will be logged.

Explanation:
Note:
* The Trusted Solaris environment provides audit classes including:
ss – Change system state
no – Invalid class
lo – Login or logout
* always-audit
Lists the audit classes that are audited for this user. Modifications to the system-wide classes are prefixed by a
caret (^). Classes that are added to the system-wide classes are not prefixed by a caret.
never-audit
Lists the audit classes that are never audited for the user, even if these audit events are audited system-wide.
Modifications to the system-wide classes are prefixed by a caret (^).
* Process preselection mask – A combination of the system-wide audit mask and the user-specific audit mask,
if a user audit mask has been specified. When a user logs in, the login process combines the preselected
classes to establish the process preselection mask for the user’s processes. The process preselection mask
specifies whether events in each audit class are to generate audit records.The following algorithm describes how the system obtains the user’s process preselection mask:
(system-wide default flags + always-audit-classes) – never-audit-classes
* getent user_attr
getent
– get entries from administrative database
getent gets a list of entries from the administrative database specified by database. The information generally
comes from one or more of the sources that are specified for the database in /etc/nsswitch.conf.



Leave a Reply 0

Your email address will not be published. Required fields are marked *