1bsmconv(1M)             System Administration Commands             bsmconv(1M)
2
3
4

NAME

6       bsmconv, bsmunconv - enable or disable Solaris Auditing
7

SYNOPSIS

9       /etc/security/bsmconv [rootdir]...
10
11
12       /etc/security/bsmunconv [rootdir]...
13
14

DESCRIPTION

16       The bsmconv and bsmunconv scripts are used to enable or disable the BSM
17       features on a Solaris system. The optional argument rootdir is  a  list
18       of  one  or more root directories of diskless clients that have already
19       been configured. See smdiskless(1M).
20
21
22       To enable or disable BSM on a diskless client, a server,  or  a  stand-
23       alone system, logon as super-user to the system being converted and use
24       the bsmconv or bsmunconv commands without any options.
25
26
27       To enable or disable BSM  on  a  diskless  client  from  that  client's
28       server,  logon  to the server as super-user and use bsmconv, specifying
29       the root directory of each diskless client  you  wish  to  affect.  For
30       example, the command:
31
32         myhost# bsmconv /export/root/client1 /export/root/client2
33
34
35
36
37       enables  BSM  on  the two machines named client1 and client2. While the
38       command:
39
40         myhost# bsmconv
41
42
43
44
45       enables BSM only on the machine called myhost. It is no  longer  neces‐
46       sary to enable BSM on both the server and its diskless clients.
47
48
49       After running bsmconv the system can be configured by editing the files
50       in /etc/security. Each diskless client has its own copy  of  configura‐
51       tion  files  in  its root directory. You might want to edit these files
52       before rebooting each client.
53
54
55       Following the completion  of  either  script,  the  affected  system(s)
56       should  be rebooted to allow the auditing subsystem to come up properly
57       initialized.
58

FILES

60       The following files are created by bsmconv:
61
62       /etc/security/device_maps
63
64           Administrative file defining the mapping of device special files to
65           allocatable device names.
66
67
68       /etc/security/device_allocate
69
70           Administrative file defining parameters for device allocation.
71
72

ATTRIBUTES

74       See attributes(5) for descriptions of the following attributes:
75
76
77
78
79       ┌─────────────────────────────┬─────────────────────────────┐
80       │      ATTRIBUTE TYPE         │      ATTRIBUTE VALUE        │
81       ├─────────────────────────────┼─────────────────────────────┤
82       │Availability                 │SUNWcsr                      │
83       ├─────────────────────────────┼─────────────────────────────┤
84       │Interface Stability          │Obsolete Committed           │
85       └─────────────────────────────┴─────────────────────────────┘
86

SEE ALSO

88       auditconfig(1M),     auditd(1M),    audit_startup(1M),    audit.log(4),
89       audit_control(4), attributes(5)
90
91
92       See the section on Solaris Auditing  in  System  Administration  Guide:
93       Security Services.
94

NOTES

96       bsmconv and bsmunconv are not valid in a non-global zone.
97
98
99       These commands are Obsolete and may be removed and replaced with equiv‐
100       alent functionality in a future release of Solaris.
101
102
103
104SunOS 5.11                        20 Jan 2009                      bsmconv(1M)
Impressum