<?xml version="1.0" encoding="ISO-8859-1"?>
<toc>
<book href="index.html" id="id5381062">
<title>IRIX® Admin: Backup, Security, and Accounting</title>
<bookinfo href="front.html">
<title>Front Matter</title>
</bookinfo>
<preface href="pr01.html" id="id5439384">
<title>New Features in This Manual</title>
</preface>
<preface href="pr02.html" id="id5178930">
<title>About This Guide</title>
<section href="pr02.html#id5178964" id="id5178964">
<title>What This Guide Contains</title>
<section href="pr02.html#id5178969" id="id5178969">
<title>Part I</title>
</section>
<section href="pr02.html#id5179037" id="id5179037">
<title>Part II</title>
</section>
<section href="pr02.html#id5179072" id="id5179072">
<title>Part III</title>
</section>
</section>
<section href="pr02.html#id5179110" id="id5179110">
<title>How to Use This Guide</title>
</section>
<section href="pr02.html#id5179201" id="id5179201">
<title>Related Publications</title>
</section>
<section href="pr02.html#id5179373" id="id5179373">
<title>Obtaining Publications</title>
</section>
<section href="pr02.html#id5179475" id="id5179475">
<title>Conventions</title>
</section>
<section href="pr02.html#id5179662" id="id5179662">
<title>Reader Comments</title>
</section>
</preface>
<part href="pt01.html" id="LE19073-PARENT">
<title>Part I. Backup</title>
<chapter href="ch01.html" id="LE80826-PARENT">
<title>Chapter 1. Planning a Backup Strategy</title>
<section href="ch01.html#LE82544-PARENT" id="LE82544-PARENT">
<title>Types of Backup Media </title>
</section>
<section href="ch01.html#LE99153-PARENT" id="LE99153-PARENT">
<title>IRIX Backup Tools</title>
<table href="ch01.html#id5177597" id="id5177597">
<title>Table 1-1. Backup Utilities Summary</title>
</table>
<section href="ch01.html#LE65399-PARENT" id="LE65399-PARENT">
<title>IRIX Networker</title>
</section>
</section>
<section href="ch01.html#LE65800-PARENT" id="LE65800-PARENT">
<title>Backup Strategies</title>
<section href="ch01.html#id5178166" id="id5178166">
<title>When to Back Up Data and What to Back Up</title>
<section href="ch01.html#id5178194" id="id5178194">
<title>
Root Filesystem Backup</title>
</section>
<section href="ch01.html#id5178312" id="id5178312">
<title>
User Filesystem Backup</title>
</section>
</section>
<section href="ch01.html#id5178368" id="id5178368">
<title>Incremental Backup Schedule</title>
</section>
<section href="ch01.html#id5178498" id="id5178498">
<title>File Backup Across a Network</title>
</section>
<section href="ch01.html#id5178607" id="id5178607">
<title>Automatic Backups with cron</title>
</section>
<section href="ch01.html#LE39406-PARENT" id="LE39406-PARENT">
<title>Data Migration Facility and Backup Products</title>
</section>
<section href="ch01.html#LE44253-PARENT" id="LE44253-PARENT">
<title>Storage of Backups</title>
</section>
<section href="ch01.html#id5187923" id="id5187923">
<title>How Long to Keep Backups</title>
</section>
<section href="ch01.html#id5187969" id="id5187969">
<title>Guidelines for Tape Reuse</title>
</section>
</section>
</chapter>
<chapter href="ch02.html" id="LE97003-PARENT">
<title>Chapter 2. Backup and Recovery Procedures</title>
<section href="ch02.html#LE48598-PARENT" id="LE48598-PARENT">
<title>General Backup Procedure</title>
<section href="ch02.html#LE75293-PARENT" id="LE75293-PARENT">
<title>System Backup Tools</title>
</section>
</section>
<section href="ch02.html#LE80227-PARENT" id="LE80227-PARENT">
<title>
Recovering Data After System Corruption</title>
</section>
<section href="ch02.html#LE65576-PARENT" id="LE65576-PARENT">
<title>Changing the Default Backup Device</title>
</section>
<section href="ch02.html#LE99601-PARENT" id="LE99601-PARENT">
<title>Saving Files Using Data Compression</title>
</section>
<section href="ch02.html#LE24574-PARENT" id="LE24574-PARENT">
<title>Backup and Restore Utilities</title>
<section href="ch02.html#id5189823" id="id5189823">
<title>Saving Data with Backup</title>
</section>
<section href="ch02.html#id5190112" id="id5190112">
<title>Restoring Data with Restore</title>
</section>
</section>
<section href="ch02.html#LE37829-PARENT" id="LE37829-PARENT">
<title>About dump and restore</title>
<section href="ch02.html#id5190477" id="id5190477">
<title>Backing Up a Filesystem with dump </title>
</section>
<section href="ch02.html#LE66444-PARENT" id="LE66444-PARENT">
<title>Performing Incremental Backups</title>
</section>
<section href="ch02.html#LE13343-PARENT" id="LE13343-PARENT">
<title>Recovering a Filesystem with restore </title>
</section>
<section href="ch02.html#id5190919" id="id5190919">
<title>Recovering Individual Files with restore </title>
</section>
</section>
<section href="ch02.html#LE65445-PARENT" id="LE65445-PARENT">
<title>About xfsdump and xfsrestore</title>
<table href="ch02.html#id5191375" id="id5191375">
<title>Table 2-1. Filesystems and Dump Utilities</title>
</table>
<table href="ch02.html#id5191486" id="id5191486">
<title>Table 2-2. Filesystems and Restore Utilities</title>
</table>
<section href="ch02.html#id5191607" id="id5191607">
<title>Features of xfsdump and xfsrestore</title>
</section>
<section href="ch02.html#id5191819" id="id5191819">
<title>Media Layout for xfsdump</title>
<section href="ch02.html#id5192110" id="id5192110">
<title>Possible xfsdump Layouts</title>
<figure href="ch02.html#id5192157" id="id5192157">
<title>Figure 2-1. Single Dump on Single Media Object</title>
</figure>
<figure href="ch02.html#id5192198" id="id5192198">
<title>Figure 2-2. Single Dump on Multiple Media Objects</title>
</figure>
<figure href="ch02.html#id5192261" id="id5192261">
<title>Figure 2-3. Multiple Dumps on Single Media Object</title>
</figure>
<figure href="ch02.html#id5192296" id="id5192296">
<title>Figure 2-4. Multiple Dumps on Multiple Media Objects</title>
</figure>
</section>
</section>
<section href="ch02.html#id5192316" id="id5192316">
<title>Saving Data with xfsdump</title>
<section href="ch02.html#id5192403" id="id5192403">
<title>Specifying Local Media with xfsdump</title>
</section>
<section href="ch02.html#id5192577" id="id5192577">
<title>Specifying a Remote Tape Drive with xfsdump</title>
</section>
<section href="ch02.html#id5192722" id="id5192722">
<title>Backing Up to a File with xfsdump</title>
</section>
<section href="ch02.html#id5192847" id="id5192847">
<title>Reusing Tapes with xfsdump</title>
</section>
<section href="ch02.html#id5192984" id="id5192984">
<title>Erasing Used Tapes</title>
</section>
<section href="ch02.html#id5193032" id="id5193032">
<title>About Incremental and Resumed Dumps</title>
</section>
<section href="ch02.html#id5193144" id="id5193144">
<title>Performing an Incremental xfsdump</title>
</section>
<section href="ch02.html#id5193255" id="id5193255">
<title>Performing a Resumed xfsdump</title>
</section>
</section>
<section href="ch02.html#LE68879-PARENT" id="LE68879-PARENT">
<title>Examining xfsdump Archives</title>
</section>
<section href="ch02.html#LE26328-PARENT" id="LE26328-PARENT">
<title>About xfsrestore</title>
<section href="ch02.html#id5193846" id="id5193846">
<title>Performing Simple Restores with xfsrestore</title>
</section>
<section href="ch02.html#id5194146" id="id5194146">
<title>Restoring Individual Files with xfsrestore</title>
</section>
<section href="ch02.html#id5194287" id="id5194287">
<title>Performing Network Restores with xfsrestore</title>
</section>
<section href="ch02.html#id5194408" id="id5194408">
<title>Performing Interactive Restores with xfsrestore</title>
</section>
<section href="ch02.html#LE56687-PARENT" id="LE56687-PARENT">
<title>Performing Cumulative Restores with xfsrestore</title>
</section>
<section href="ch02.html#id5194987" id="id5194987">
<title>Interrupting xfsrestore</title>
</section>
<section href="ch02.html#id5195137" id="id5195137">
<title>About the housekeeping and orphanage Directories</title>
</section>
</section>
<section href="ch02.html#LE61361-PARENT" id="LE61361-PARENT">
<title>Using xfsdump and xfsrestore to Copy Filesystems</title>
</section>
</section>
<section href="ch02.html#LE53826-PARENT" id="LE53826-PARENT">
<title>About tar</title>
<section href="ch02.html#id5195617" id="id5195617">
<title>Backing Up Files with tar</title>
</section>
<section href="ch02.html#id5195643" id="id5195643">
<title>Using tar to Back Up Files by Modification Date </title>
</section>
<section href="ch02.html#id5195736" id="id5195736">
<title>Performing Incremental Backups with tar</title>
</section>
<section href="ch02.html#id5195890" id="id5195890">
<title>Improving tar Performance</title>
</section>
<section href="ch02.html#id5195926" id="id5195926">
<title>Examining tar Archives</title>
<table href="ch02.html#id5196024" id="id5196024">
<title>Table 2-3. tar File Comparison Key Characters</title>
</table>
</section>
<section href="ch02.html#id5196235" id="id5196235">
<title>Restoring tar Archives</title>
</section>
</section>
<section href="ch02.html#LE85662-PARENT" id="LE85662-PARENT">
<title>About cpio</title>
<section href="ch02.html#id5196536" id="id5196536">
<title>Backing Up Files with cpio</title>
</section>
<section href="ch02.html#id5196612" id="id5196612">
<title>Using cpio to Back Up Files by Modification Date</title>
</section>
<section href="ch02.html#id5196684" id="id5196684">
<title>Performing Incremental Backups with cpio</title>
</section>
<section href="ch02.html#id5196873" id="id5196873">
<title>Examining cpio Archives</title>
</section>
<section href="ch02.html#id5196977" id="id5196977">
<title>Restoring cpio Archives</title>
</section>
</section>
<section href="ch02.html#LE90789-PARENT" id="LE90789-PARENT">
<title>About dd</title>
</section>
</chapter>
<chapter href="ch03.html" id="LE79602-PARENT">
<title>Chapter 3. Troubleshooting Backup and Recovery</title>
<section href="ch03.html#LE71748-PARENT" id="LE71748-PARENT">
<title>Troubleshooting Unreadable Backups</title>
</section>
<section href="ch03.html#LE47329-PARENT" id="LE47329-PARENT">
<title>Reading Media from Other Systems</title>
</section>
<section href="ch03.html#LE79992-PARENT" id="LE79992-PARENT">
<title>Troubleshooting Errors During Backup</title>
</section>
<section href="ch03.html#LE59012-PARENT" id="LE59012-PARENT">
<title>
Restoring the Correct Backup after the Wrong One</title>
</section>
<section href="ch03.html#LE96554-PARENT" id="LE96554-PARENT">
<title>Testing for Bad Media</title>
</section>
<section href="ch03.html#LE63578-PARENT" id="LE63578-PARENT">
<title>Backup and Recovery Error Messages and Actions</title>
</section>
</chapter>
</part>
<part href="pt02.html" id="LE10789-PARENT">
<title>Part II. Security</title>
<chapter href="ch04.html" id="LE42210-PARENT">
<title>Chapter 4. IRIX System Security</title>
<section href="ch04.html#LE59221-PARENT" id="LE59221-PARENT">
<title>About System Security</title>
</section>
<section href="ch04.html#LE95533-PARENT" id="LE95533-PARENT">
<title>Standard Security Features</title>
</section>
<section href="ch04.html#LE69861-PARENT" id="LE69861-PARENT">
<title>Security Safeguards and Cautions</title>
</section>
<section href="ch04.html#LE75080-PARENT" id="LE75080-PARENT">
<title>Password Administration</title>
<section href="ch04.html#LE37825-PARENT" id="LE37825-PARENT">
<title>
Guidelines for Devising Passwords</title>
</section>
<section href="ch04.html#LE48777-PARENT" id="LE48777-PARENT">
<title>About PROM Passwords</title>
<section href="ch04.html#id5200413" id="id5200413">
<title>
Clearing the PROM Password Using nvram</title>
</section>
<section href="ch04.html#id5200472" id="id5200472">
<title>
Setting the PROM Password from the Command Monitor</title>
</section>
</section>
<section href="ch04.html#LE46500-PARENT" id="LE46500-PARENT">
<title>Establishing Second (Dialup) Passwords</title>
</section>
<section href="ch04.html#LE53045-PARENT" id="LE53045-PARENT">
<title>About Shadow Passwords</title>
<section href="ch04.html#id5201196" id="id5201196">
<title>Using a Shadow Password File</title>
</section>
</section>
<section href="ch04.html#LE75421-PARENT" id="LE75421-PARENT">
<title>
About Password Aging</title>
<section href="ch04.html#id5201317" id="id5201317">
<title>Controlling Password Aging with the passwd Command</title>
</section>
<section href="ch04.html#id5201483" id="id5201483">
<title>Controlling Password Aging by Editing /etc/passwd</title>
<table href="ch04.html#id5201627" id="id5201627">
<title>Table 4-1. Password Aging Character Codes</title>
</table>
</section>
</section>
<section href="ch04.html#LE38605-PARENT" id="LE38605-PARENT">
<title>Using pwck to Check the Password File</title>
</section>
</section>
<section href="ch04.html#LE31913-PARENT" id="LE31913-PARENT">
<title>System Login and Account Administration</title>
<section href="ch04.html#LE47273-PARENT" id="LE47273-PARENT">
<title>
About Special Accounts</title>
</section>
<section href="ch04.html#LE68670-PARENT" id="LE68670-PARENT">
<title>
Locking Unused Logins</title>
</section>
<section href="ch04.html#LE84964-PARENT" id="LE84964-PARENT">
<title>System Login Options</title>
<section href="ch04.html#id5202960" id="id5202960">
<title>
Restricting root Logins </title>
</section>
<section href="ch04.html#id5203024" id="id5203024">
<title>
Restricting Login Attempts (MAXTRYS)</title>
</section>
<section href="ch04.html#id5203191" id="id5203191">
<title>
Setting a Time Period to Disable a Line (DISABLETIME) </title>
</section>
<section href="ch04.html#id5203241" id="id5203241">
<title>
Recording Login Attempts </title>
</section>
<section href="ch04.html#id5203336" id="id5203336">
<title>Forcing a Password </title>
</section>
<section href="ch04.html#id5203416" id="id5203416">
<title>Disabling Accounts (LOCKOUT)</title>
</section>
<section href="ch04.html#id5203468" id="id5203468">
<title>Displaying the Last Login Time </title>
</section>
</section>
</section>
<section href="ch04.html#LE43095-PARENT" id="LE43095-PARENT">
<title>About Set-UID and Set-GID Permissions</title>
<section href="ch04.html#id5203629" id="id5203629">
<title>Checking for Set-UID Files Owned by root</title>
</section>
<section href="ch04.html#id5203710" id="id5203710">
<title>Checking for Set-UIDs in the root Filesystem</title>
</section>
<section href="ch04.html#id5203890" id="id5203890">
<title>Checking Set-UIDs in Filesystems Other Than root</title>
</section>
</section>
<section href="ch04.html#LE48436-PARENT" id="LE48436-PARENT">
<title>About General File and Directory Permissions</title>
</section>
<section href="ch04.html#LE34266-PARENT" id="LE34266-PARENT">
<title>/etc/shells database</title>
</section>
<section href="ch04.html#LE72006-PARENT" id="LE72006-PARENT">
<title>Accounts Shipped Without Passwords</title>
</section>
<section href="ch04.html#LE13168-PARENT" id="LE13168-PARENT">
<title>Security File and Command Reference</title>
<table href="ch04.html#id5204471" id="id5204471">
<title>Table 4-2. IRIX Security Files</title>
</table>
<table href="ch04.html#id5204711" id="id5204711">
<title>Table 4-3. IRIX Security Commands</title>
</table>
</section>
<section href="ch04.html#LE98181-PARENT" id="LE98181-PARENT">
<title>Enhanced Security Features</title>
<section href="ch04.html#id5205186" id="id5205186">
<title>Access 
Control 
Lists (ACLs)</title>
<section href="ch04.html#LE79093-PARENT" id="LE79093-PARENT">
<title>Long ACL Text Form</title>
</section>
<section href="ch04.html#id5205864" id="id5205864">
<title>Short ACL Text Form</title>
</section>
<section href="ch04.html#id5205991" id="id5205991">
<title>Using ls -D and chacl</title>
</section>
</section>
<section href="ch04.html#id5206233" id="id5206233">
<title>Least-Privilege Capabilities
</title>
<section href="ch04.html#id5206306" id="id5206306">
<title>
The /etc/capability File</title>
</section>
<section href="ch04.html#LE22786-PARENT" id="LE22786-PARENT">
<title>Capabilities in This Release</title>
</section>
<section href="ch04.html#id5208252" id="id5208252">
<title>
File 
Capabilities</title>
</section>
<section href="ch04.html#id5208390" id="id5208390">
<title>Creating Custom Capabilities</title>
</section>
<section href="ch04.html#id5208436" id="id5208436">
<title>
Using attrinit to Clean Up Capability Corruption</title>
</section>
</section>
</section>
<section href="ch04.html#LE16135-PARENT" id="LE16135-PARENT">
<title>Pluggable Authentication Modules</title>
</section>
</chapter>
<chapter href="ch05.html" id="LE31929-PARENT">
<title>Chapter 5. Network Security</title>
<section href="ch05.html#LE21803-PARENT" id="LE21803-PARENT">
<title>
Local Area Network Access</title>
<section href="ch05.html#id5208834" id="id5208834">
<title>
Network Access Control Files</title>
</section>
<section href="ch05.html#id5209203" id="id5209203">
<title>Local inetd Services </title>
</section>
<section href="ch05.html#id5209287" id="id5209287">
<title>X11 Network Access</title>
<section href="ch05.html#LE44227-PARENT" id="LE44227-PARENT">
<title>Security and X Server Initialization</title>
</section>
<section href="ch05.html#id5209446" id="id5209446">
<title>Limiting Access with the X0.hosts File</title>
</section>
<section href="ch05.html#LE34430-PARENT" id="LE34430-PARENT">
<title>Limiting Access with the xhost Command</title>
</section>
<section href="ch05.html#id5209693" id="id5209693">
<title>Interactive Use of the xhost Command</title>
</section>
<section href="ch05.html#id5209838" id="id5209838">
<title>X Authority</title>
</section>
</section>
</section>
<section href="ch05.html#LE66837-PARENT" id="LE66837-PARENT">
<title>About Network Security and Firewalls</title>
<section href="ch05.html#id5209949" id="id5209949">
<title>About the Internet</title>
</section>
<section href="ch05.html#id5210034" id="id5210034">
<title>Network Security Issues</title>
</section>
<section href="ch05.html#LE54586-PARENT" id="LE54586-PARENT">
<title>About Firewalls</title>
<figure href="ch05.html#id5210210" id="id5210210">
<title>Figure 5-1. A Simple Firewall Environment</title>
</figure>
</section>
<section href="ch05.html#id5210249" id="id5210249">
<title>Firewall Design Philosophy</title>
</section>
<section href="ch05.html#id5210411" id="id5210411">
<title>Monitoring the Firewall</title>
</section>
<section href="ch05.html#id5210533" id="id5210533">
<title>World Wide Web Security Issues</title>
</section>
</section>
<section href="ch05.html#LE24996-PARENT" id="LE24996-PARENT">
<title>Hardware Configuration for Firewalls</title>
<section href="ch05.html#id5210622" id="id5210622">
<title>Routers and Firewalls</title>
</section>
<section href="ch05.html#id5210778" id="id5210778">
<title>Hardware Configurations for Use as Firewalls</title>
<section href="ch05.html#id5210792" id="id5210792">
<title>Dual-Homed Host Firewall</title>
</section>
<section href="ch05.html#id5210874" id="id5210874">
<title>Screened Host Gateway</title>
<figure href="ch05.html#id5210925" id="id5210925">
<title>Figure 5-2. Screened Host</title>
</figure>
<figure href="ch05.html#id5211025" id="id5211025">
<title>Figure 5-3. Screened Subnet</title>
</figure>
</section>
</section>
</section>
<section href="ch05.html#LE40397-PARENT" id="LE40397-PARENT">
<title>
IRIX Configuration for Security</title>
<section href="ch05.html#id5211104" id="id5211104">
<title>Network Software Setup on a Dual-Homed Host</title>
</section>
<section href="ch05.html#id5211162" id="id5211162">
<title>Tightening Security in IRIX</title>
<section href="ch05.html#LE10730-PARENT" id="LE10730-PARENT">
<title>Disabling Forwarding of IP Packets</title>
</section>
<section href="ch05.html#LE75595-PARENT" id="LE75595-PARENT">
<title>Limiting inetd Services</title>
</section>
<section href="ch05.html#id5211975" id="id5211975">
<title>
Password Protection on the Firewall</title>
</section>
<section href="ch05.html#id5212059" id="id5212059">
<title>Limiting rpc Services Access on the Firewall</title>
</section>
<section href="ch05.html#LE58392-PARENT" id="LE58392-PARENT">
<title>Disabling NIS (YP) on the Firewall</title>
</section>
<section href="ch05.html#LE75265-PARENT" id="LE75265-PARENT">
<title>Disallowing NFS Access on the Firewall</title>
</section>
<section href="ch05.html#id5212466" id="id5212466">
<title>About  Log Files on the Firewall</title>
</section>
<section href="ch05.html#id5212510" id="id5212510">
<title>Checking Software Integrity on the Firewall</title>
</section>
<section href="ch05.html#id5212582" id="id5212582">
<title>Educating Users About the Firewall</title>
</section>
</section>
</section>
<section href="ch05.html#LE92547-PARENT" id="LE92547-PARENT">
<title>Internal Network Security Configuration</title>
<section href="ch05.html#id5212774" id="id5212774">
<title>Domain Name System (DNS) Security Guidelines</title>
</section>
<section href="ch05.html#id5212823" id="id5212823">
<title>Mail Configuration Security Guidelines</title>
<section href="ch05.html#id5212878" id="id5212878">
<title>Sendmail Configuration and Mail Aliases</title>
</section>
<section href="ch05.html#id5212969" id="id5212969">
<title>Mail Spool Isolation</title>
</section>
</section>
<section href="ch05.html#LE40558-PARENT" id="LE40558-PARENT">
<title>About Proxy Servers</title>
</section>
<section href="ch05.html#LE19156-PARENT" id="LE19156-PARENT">
<title>Secure RPC</title>
</section>
</section>
</chapter>
</part>
<part href="pt03.html" id="LE25185-PARENT">
<title>Part III. Accounting</title>
<chapter href="ch06.html" id="LE65846-PARENT">
<title>Chapter 6. Administering the System Audit Trail</title>
<section href="ch06.html#LE52560-PARENT" id="LE52560-PARENT">
<title>About MACs and DACs</title>
</section>
<section href="ch06.html#LE32265-PARENT" id="LE32265-PARENT">
<title>Enabling Auditing</title>
</section>
<section href="ch06.html#LE79796-PARENT" id="LE79796-PARENT">
<title>Default Auditing</title>
<table href="ch06.html#id5213605" id="id5213605">
<title>Table 6-1. Events Audited by Default</title>
</table>
</section>
<section href="ch06.html#LE77858-PARENT" id="LE77858-PARENT">
<title>Customizing Auditing</title>
<section href="ch06.html#id5214147" id="id5214147">
<title>Auditable Actions</title>
</section>
<section href="ch06.html#LE63445-PARENT" id="LE63445-PARENT">
<title>Auditable Events</title>
</section>
<section href="ch06.html#LE43901-PARENT" id="LE43901-PARENT">
<title>About satconfig</title>
<section href="ch06.html#id5216417" id="id5216417">
<title>Using satconfig</title>
</section>
</section>
<section href="ch06.html#LE61964-PARENT" id="LE61964-PARENT">
<title>About sat_select</title>
<section href="ch06.html#id5216573" id="id5216573">
<title>Using sat_select</title>
</section>
</section>
<section href="ch06.html#LE20065-PARENT" id="LE20065-PARENT">
<title>Saving and Retrieving Your Auditing Environment</title>
</section>
<section href="ch06.html#LE13988-PARENT" id="LE13988-PARENT">
<title>Placing the Audit Files</title>
</section>
<section href="ch06.html#LE96958-PARENT" id="LE96958-PARENT">
<title>Auditing a Specific User</title>
<section href="ch06.html#id5217199" id="id5217199">
<title>Auditing to Determine Security Violations</title>
</section>
<section href="ch06.html#id5217282" id="id5217282">
<title>Auditing a User's Activities</title>
</section>
</section>
<section href="ch06.html#LE66461-PARENT" id="LE66461-PARENT">
<title>Auditing a File</title>
</section>
<section href="ch06.html#LE31906-PARENT" id="LE31906-PARENT">
<title>Auditing a Label Under Trusted IRIX</title>
</section>
</section>
<section href="ch06.html#LE33289-PARENT" id="LE33289-PARENT">
<title>About the Audit Data</title>
</section>
<section href="ch06.html#LE45356-PARENT" id="LE45356-PARENT">
<title>About Security Violations</title>
<section href="ch06.html#id5217983" id="id5217983">
<title>System Use and Abuse by Outside Users</title>
<section href="ch06.html#id5218037" id="id5218037">
<title>Attempts at Unauthorized System Entry</title>
</section>
<section href="ch06.html#id5218166" id="id5218166">
<title>System Use at Unusual Hours or from Unusual Locations </title>
</section>
<section href="ch06.html#id5218305" id="id5218305">
<title>Connections with Machines Outside the Local Network </title>
</section>
</section>
<section href="ch06.html#id5218473" id="id5218473">
<title>System Use and Abuse by Inside Users</title>
<section href="ch06.html#id5218549" id="id5218549">
<title>File Permission Violations by Inside Users</title>
</section>
<section href="ch06.html#id5218723" id="id5218723">
<title>Unexpected Use of Root Privilege by Inside Users</title>
</section>
<section href="ch06.html#id5218905" id="id5218905">
<title>Activity by Particular Inside Users </title>
</section>
<section href="ch06.html#id5218989" id="id5218989">
<title>Access to Particular Files or Resources</title>
</section>
</section>
<section href="ch06.html#id5219035" id="id5219035">
<title>About Proper and Improper System Management</title>
<section href="ch06.html#id5219098" id="id5219098">
<title>Modifications of System Data Files</title>
</section>
<section href="ch06.html#id5219220" id="id5219220">
<title>Modifications of System Program Attributes</title>
</section>
<section href="ch06.html#id5219380" id="id5219380">
<title>Manipulation of the Audit Trail </title>
</section>
</section>
</section>
<section href="ch06.html#LE37238-PARENT" id="LE37238-PARENT">
<title>Archiving Audit Data</title>
<section href="ch06.html#LE96299-PARENT" id="LE96299-PARENT">
<title>Removing Audit Data</title>
</section>
<section href="ch06.html#id5219567" id="id5219567">
<title>About Audit File Overflow</title>
<section href="ch06.html#id5219608" id="id5219608">
<title>Recovering from Audit File Overflow</title>
</section>
</section>
</section>
</chapter>
<chapter href="ch07.html" id="LE32913-PARENT">
<title>Chapter 7. System Accounting</title>
<section href="ch07.html#LE82936-PARENT" id="LE82936-PARENT">
<title>About the Process Accounting System</title>
<section href="ch07.html#id5220054" id="id5220054">
<title>Parts of the Process Accounting System</title>
</section>
<section href="ch07.html#LE24663-PARENT" id="LE24663-PARENT">
<title>Turning On Process Accounting</title>
</section>
<section href="ch07.html#id5220476" id="id5220476">
<title>Turning Off Process Accounting</title>
</section>
</section>
<section href="ch07.html#LE11956-PARENT" id="LE11956-PARENT">
<title>Accounting Files and Directories</title>
<section href="ch07.html#LE19570-PARENT" id="LE19570-PARENT">
<title>Accounting File Size Control</title>
</section>
<section href="ch07.html#id5220784" id="id5220784">
<title>Files in the /var/adm Directory</title>
</section>
<section href="ch07.html#id5220933" id="id5220933">
<title>Files in the /var/adm/acct/nite Directory</title>
</section>
<section href="ch07.html#id5221518" id="id5221518">
<title>Files in the /var/adm/acct/sum Directory</title>
</section>
<section href="ch07.html#id5221793" id="id5221793">
<title>Files in the /var/adm/acct/fiscal Directory</title>
</section>
</section>
<section href="ch07.html#LE72742-PARENT" id="LE72742-PARENT">
<title>About Daily System Accounting</title>
<section href="ch07.html#id5222108" id="id5222108">
<title>Setting Up the Accounting System</title>
</section>
</section>
<section href="ch07.html#LE26631-PARENT" id="LE26631-PARENT">
<title>Daily System Accounting with runacct</title>
<section href="ch07.html#id5222352" id="id5222352">
<title>runacct Summary Files</title>
</section>
<section href="ch07.html#id5222681" id="id5222681">
<title>runacct Reentrant States</title>
</section>
<section href="ch07.html#id5223150" id="id5223150">
<title>Recovering from runacct Failures</title>
</section>
<section href="ch07.html#id5223526" id="id5223526">
<title>Restarting runacct</title>
</section>
<section href="ch07.html#id5223609" id="id5223609">
<title>Fixing Corrupted Accounting Files</title>
<section href="ch07.html#id5223623" id="id5223623">
<title>Fixing wtmp Errors</title>
</section>
<section href="ch07.html#id5223781" id="id5223781">
<title>Fixing tacct Errors</title>
</section>
</section>
<section href="ch07.html#LE28716-PARENT" id="LE28716-PARENT">
<title>Updating Holidays for Accounting</title>
</section>
<section href="ch07.html#id5224125" id="id5224125">
<title>Daily runacct Reports</title>
<section href="ch07.html#id5224350" id="id5224350">
<title>Daily Usage Report</title>
</section>
<section href="ch07.html#id5224567" id="id5224567">
<title>Daily Command and Monthly Total Command Summaries</title>
</section>
</section>
</section>
<section href="ch07.html#LE42770-PARENT" id="LE42770-PARENT">
<title>IRIX Extended Accounting</title>
<section href="ch07.html#id5224899" id="id5224899">
<title>About Extended Accounting</title>
</section>
<section href="ch07.html#id5225069" id="id5225069">
<title>Using Extended Accounting</title>
</section>
<section href="ch07.html#id5225235" id="id5225235">
<title>Array Sessions</title>
</section>
<section href="ch07.html#id5225377" id="id5225377">
<title>Project IDs</title>
</section>
</section>
</chapter>
</part>
<index href="ix01.html" id="sgi-index">
<title>Index</title>
</index>
</book>
</toc>
