[Info-vax] Logging image activations
Jan-Erik Söderholm
jan-erik.soderholm at telia.com
Wed Oct 28 01:31:25 EDT 2009
FrankS wrote:
> On Oct 27, 6:26 pm, Jan-Erik Söderholm <jan-erik.soderh... at telia.com>
> wrote:
>> Hm, maybe some ACL on the files to enable auditing of
>> "execute" access ? That would be easy to add to the files
>> anyway, I'm not sure about how easy it is to get reports.
>> Maybe some mangling of the ANA/AUD output would do...
>>
>
> That option would at least allow you to be more selective about which
> executables get logged, instead of all image activations. The
> assumption is that you know in advance the executables of interest.
Yes, the images of interest are all in 4-5 applications
specific directories. And they are also all on a application
specific device. Most/all images that I'm not interested in
are on the system device.
I'll probably experiment with both the SET ACC/ENAB=IMAGE method
and some ACLs to enable access auditing and see what's easiest.
> If some user or batch process uses an executable that you're not aware
> of, then only the accounting method will catch it.
>
More information about the Info-vax
mailing list