acfsutil audit init

Purpose

Initializes Oracle ACFS auditing.

Syntax and Description

acfsutil audit init -h
acfsutil audit init -M audit_manager_group -A auditor_group

acfsutil audit init -h displays help text and exits.

Table 16-45 contains the options available with the acfsutil audit init command.


Table 16-45 Options for the acfsutil audit init command

Option Description

-M audit_manager_group

Specifies the operating system (OS) group which assigns users to the Oracle ACFS audit manager role. To achieve separation of duties, you should create a new group specifically for this purpose and this group should be different from the system administrator group, Oracle ACFS security administrator OS group, and the Oracle ACFS audit auditor OS group

-A auditor_group

Specifies the operating system (OS) group which assigns users to the Oracle ACFS audit auditor role. To achieve separation of duties, you should create a new group specifically for this purpose and this group should be different from the system administrator group, Oracle ACFS security administrator OS group, and the Oracle ACFS audit manager OS group.


The acfsutil audit init command must be run by the system administrator before enabling auditing for any of the audit sources on a file system. The command sets up the required roles for auditing and must be run before any type of auditing can be enabled on a file system. After running the command, auditing is enabled by default for all features which use auditing.

Because you cannot choose a different OS group for either the Oracle ACFS audit manager or auditor after initialization, you should create new OS groups for these specific purposes before initializing Oracle ACFS auditing.

Only a system administrator can run this command.

Examples

The following example shows the use of the acfsutil audit init command.

Example 16-38 Using the acfsutil audit init command

# /sbin/acfsutil audit init -M myaudit_mgr_grp -A myauditor_grp