BART (Basic Audit Reporting Tool) is available on Solaris 10. This tool provides a simple tool to manage file level auditing. I'm interested in a Solaris 9 comparable tool that will allow me to manage/select the particular files that will be audited for modification activity.
BSM (solaris auditing) audits files--all or none. It will allow limiting the audit activity by setting the /etc/security/audit_control flags to the negative, i.e. -fw, -fc, -fd, and -fr. But this will not allow filtering of files/directories.
BSM (solaris auditing) audits files--all or none. It will allow limiting the audit activity by setting the /etc/security/audit_control flags to the negative, i.e. -fw, -fc, -fd, and -fr. But this will not allow filtering of files/directories.