audit_track_paths.5 (2010 09)

a
audit_track_paths(5) audit_track_paths(5)
(Tunable Kernel Parameters)
What Are the Side Effects of Turning the Tunable On?
The name of the current working directory (and root directory) of every process is tracked, resulting in a
change in memory usage and performance of the system.
When Should the Tunable Be Turned Off?
When both
HIDS and Audit are OFF
.
What Are the Side Effects of Turning the Tunable Off?
When the tunable is
OFF, HP-UX HIDS
is unable to use any detection template that requires system call
audit records (such as the "Modification of Files/Directories Template"). See HP-UX HIDS documentation
for more information about templates. Also in this case Audit will report relative pathnames in the
audit log.
What Other Tunables Should Be Changed at the Same Time?
This tunable is independent of other tunables.
WARNINGS
All HP-UX kernel tunable parameters are release-specific. This parameter may be removed or have its
meaning changed in future releases of HP-UX.
Installation of optional kernel software, from HP or other vendors, may cause changes to tunable parame-
ter values. After installation, some tunable parameters may no longer be at the default or recommended
values. For information about the effects of installation on tunable values, consult the documentation for
the kernel software being installed. For information about optional kernel software that was factory
installed on your system, see HP-UX Release Notes at
http://www.hp.com/go/hpux-core-docs
.
AUTHOR
audit_track_paths
was developed by HP.
SEE ALSO
kctune(1M), audit(5), ids.cf(5).
2 Hewlett-Packard Company 2 HP-UX 11i Version 3: September 2010