crontab error

[bluedragon2]

Solaris 10 box.

Auditing is set up, but it is not running.

As root when you attempt to look at someone else's cron by doing:

crontab -l $user

The following error is displayed:

crontab: The audit context for your shell has not been set

If you SU to the user you can read the cron by doing crontab -l


Thanks for any insight into this issue.

[Blue]Blue[/Blue] [Dragon]

If I wasn't Blue, I would just be a Dragon...

 

[dandan123]

Do you have this entry in /etc/security/audit_event -

AUE_ssh:login - ssh:lo

If not try adding it.

 

[bluedragon2]

Yes, it is there.

Thanks

[Blue]Blue[/Blue] [Dragon]

If I wasn't Blue, I would just be a Dragon...