System Administration Commands                        bsmconv(1M)



NAME
     bsmconv, bsmunconv - enable or disable Solaris Auditing

SYNOPSIS
     /etc/security/bsmconv [rootdir]...


     /etc/security/bsmunconv [rootdir]...


DESCRIPTION
     The bsmconv and bsmunconv scripts are used to enable or dis-
     able  the  BSM  features  on  a Solaris system. The optional
     argument rootdir is a list of one or more  root  directories
     of  diskless  clients that have already been configured. See
     smdiskless(1M).


     To enable or disable BSM on a diskless client, a server,  or
     a  stand-alone  system,  logon  as  super-user to the system
     being converted and use the bsmconv  or  bsmunconv  commands
     without any options.


     To enable or disable BSM on  a  diskless  client  from  that
     client's  server,  logon to the server as super-user and use
     bsmconv, specifying the  root  directory  of  each  diskless
     client you wish to affect. For example, the command:

       myhost# bsmconv /export/root/client1 /export/root/client2




     enables BSM on the two machines named client1  and  client2.
     While the command:

       myhost# bsmconv




     enables BSM only on the machine  called  myhost.  It  is  no
     longer  necessary  to  enable BSM on both the server and its
     diskless clients.


     After running bsmconv the system can be configured by  edit-
     ing the files in /etc/security. Each diskless client has its
     own copy of configuration files in its root  directory.  You
     might want to edit these files before rebooting each client.




SunOS 5.11          Last change: 20 Jan 2009                    1






System Administration Commands                        bsmconv(1M)



     Following the completion  of  either  script,  the  affected
     system(s) should be rebooted to allow the auditing subsystem
     to come up properly initialized.

FILES
     The following files are created by bsmconv:

     /etc/security/devicemaps

         Administrative file defining the mapping of device  spe-
         cial files to allocatable device names.


     /etc/security/deviceallocate

         Administrative file defining parameters for device allo-
         cation.


ATRIBUTES
     See attributes(5) for descriptions of the  following  attri-
     butes:



     
           ATRIBUTE TYPE               ATRIBUTE VALUE       
    
     Availability                 SUNWcsr                     
    
     Interface Stability          Obsolete Committed          
    


SEE ALSO
     auditconfig(1M),       auditd(1M),        auditstartup(1M),
     audit.log(4), auditcontrol(4), attributes(5)


     See the section on Solaris Auditing in System Administration
     Guide: Security Services.

NOTES
     bsmconv and bsmunconv are not valid in a non-global zone.


     These commands are Obsolete and may be removed and  replaced
     with   equivalent  functionality  in  a  future  release  of
     Solaris.






SunOS 5.11          Last change: 20 Jan 2009                    2