Saving and Retrieving Your Auditing Environment

Saving and Retrieving Your Auditing Environment

From time to time you may wish to change your auditing environment. You do this with the sat_select command. If you are making a temporary change, you may wish to save your current auditing environment for easy replacement. To do so, use this command:

sat_select -out > /etc/config/sat_select.options

Then, to restore auditing to the saved state, use this command:

sat_select 'cat /etc/config/sat_select.options'

The single quotation marks in the above example are crucial and must not be omitted.

You may save as many different audit states as you wish, in different filenames. Simply insert the filename of the state you wish to use in the above example. The /etc/config/sat_select.options file is the default audit state file that is read at boot time. The /etc/config/sat_select.options file must be labeled dblow if you are running Trusted IRIX/B, and you should restrict DAC file permissions to root only regardless of your operating system type.