|
Secure4Aduit (auditGUARD)
FAQ
Installation
Does the system have to be rebooted after Secure4Audit is installed?
What if an older version of Secure4Audit
is running on my system? How do I install a new version?
Menu Program
I tried to run the menu program, but
I received the following error: 'You do not have the privileges
needed to run this program'. I was root at the time so why could
I not run the menu program.?
I logged in to my workstation as root
and tried to run the menu program. Now I get the following error:
'Secure4Audit has expired...' but I just installed it!
The GUI doesn't start; the character-based
version comes up instead. Why?
Trying to start the GUI version yields
many, many errors, finally comes up in black and white. Why?
When attempting to run the GUI menu
program, I received the following error then it core dumped: 'Warning:
locale not supported by Xlib, locale set to C'
I cannot run the GUI menu program.
I keep getting the following errors: "Warning locale not supported
by C library, locale unchanged. Security Validation failure (1)."
Why?
General
I've heard auditing generates so much
data that there are constant storage problems. Is this true?
What am I supposed to do with all of
this information?
Installation
Does the system have to be
rebooted after Secure4Audit is installed?
No! Secure4Audit can be installed
on the system, without taking it down, without requiring users to
log out - basically without a hassle. There is no need to reboot
after Secure4Audit is installed either.
What if an older version of
Secure4Audit is running on my system? How do I install a new version?
In general, new versions
are distinguished by increments in the units or tenths digit of
the revision number (e.g. 2.0, 2.1) and are installed in separate
directories. Updates are distinguished by increments in the hundredths
digit and are installed in the same directory (e.g. 2.01 and 2.02
are minor updates and would be installed in the /bin/secure4/s4audit_2.0
directory)
Before running the installation script, the s4auditmon
and a4auditarc processes must not be running. The installation
script will abort if an attempt is made to perform an update when
either s4auditmon or a4auditarc are running.
Menu Program
I tried to run the menu program,
but I received the following error: 'You do not have the privileges
needed to run this program'. I was root at the time so why could
I not run the menu program.?
Most likely you were logged
in to the system with your own id then did an su to root. In order
to run the main menu program, the user's initial login account must
have a valid account profile with proper management privileges,
and the effective UID must be 0 (root). The software
release directory contains a profile for the root account, which
enables root to run the menu program. While running
the menu as root the first time, your account profile should be
created with proper management privileges to enable you to login
to the system, su to root, then run the menu program.
I logged in to my workstation
as root and tried to run the menu program. Now I get the following
error: 'Secure4Audit has expired...' but I just installed it!
Demo copies of Secure4Audit
come with a set of keys that are pre-expired. Use the command /bin/secure4/s4audit
-v to get the primary reset codes.
Forward these codes to S4Software
by calling (858) 560-8112, by faxing (858) 560-8114 or by sending
email to support@s4software.com.
The GUI doesn't start; the
character-based version comes up instead. Why?
The user's DISPLAY environment
variable is not set.
Set the DISPLAY environment variable or invoke Secure4Audit
using the -display switch. s4audit -display <hostname>:0.0
Trying to start the GUI version
yields many, many errors, finally comes up in black and white. Why?
Some other program (e.g.
the Netscape browser) is using the color map. That program will
have to be terminated to enable the color version of Secure4Audit
to run.
When attempting to run the
GUI menu program, I received the following error then it core dumped:
'Warning: locale not supported by Xlib, locale set to C'
The system does not have
the nls directory , which contains library information. Contact
your S4Software representative for further information.
I cannot run the GUI menu program.
I keep getting the following errors: "Warning locale not supported
by C library, locale unchanged. Security Validation failure (1)."
Why?
There are a couple issues
here. The first one is in relation to the LANG environment variable
setting. This variable needs to be set to LANG=C or if the variable
itself cannot be changed, an additional line needs to be added to
the s4audit script, which starts the menu program. Contact your
S4Software representative for further information.
The second error regarding
the "Security Validation failure" is due to the program
not being able to open the software license file. Check to see if
/bin/secure4/a4audit.dir/s4audit.exp exists and
what the permissions are for that file (the file should be read/write
by root only) (600).
General
I've heard auditing generates
so much data that there are constant storage problems. Is this true?
First of all, with Secure4Audit
it is easy to be selective about what audit data you want to collect.
Second, Secure4Audit can be configured to automatically rename and
start new log files when they grow too large. So you control what
data you want, which reduces the amount of data you're dealing with,
and you tell Secure4Audit how large to allow a file to get before
starting a new one.
What am I supposed to do with
all of this information?
Let Secure4Audit worry about
it! You can specify scripts to be run when successful or failed
events are detected and if the event has a level greater than a
specified threshold value. You define what events warrant immediate
attention, then let Secure4Audit watch for those events. In addition,
Secure4Audit offers a number of useful reports that can be generated
at any time.
|