LS, I have a small question concerning the server sensor on a solaris box
I have a cronjob which runs under root, this cronjob does some changes to files. these changes do trigger the event "failed_change_of_important_files". In the information section of this event i see my own userid in the "audit user" field. can anybody tell me why the "audit" user is still showing my own uid ? (and what does "audit user" user mean) (I think it has to do with the way the script was placed on the machine. I first logged in using my own uid after that i do a su to root. But how it exactly works....) Kind regards, Erwin Prummel _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo
