4.4 Capture syslog AUTH Messages - Check if auth.info is set to var/log/authlog

Information

By default, Solaris systems do not capture logging information that is sent to the LOG_AUTH facility.

Solution

Please refer to the remediation steps on page 69 of the CIS document.

See Also

https://workbench.cisecurity.org/files/614

Item Details

Audit Name: CIS Solaris 10 L1 v5.2

Plugin: Unix

Control ID: 626e8babbf62fc26f7b0b139f9e0eb9d87e075a94f99d2caefeb852e384df66c