We used to use subversion (SVN) a version control system to track our
changes.  We would first do a list of all of the policies using the
following command:

bppllist -allpolicies -U > policylistfile

This file was then checked into subversion along with a change control
request number (we did not make changes without first getting a request
from someone).

This system was very useful in finding out when & what changes to the
backup policies were made.  So, if we needed to find out who made the
change to the path for a given policy, we could look it up and find out
that there was a request to do so by a given user.....very helpful
indeed!

--stuart

-----Original Message-----
From: veritas-bu-bounces AT mailman.eng.auburn DOT edu
[mailto:veritas-bu-bounces AT mailman.eng.auburn DOT edu] On Behalf Of
Mark.Donaldson AT cexp DOT com
Sent: Friday, February 15, 2008 8:56 AM
To: netbackup AT whelan-consulting.co DOT uk; qmail AT oranged DOT to;
veritas-bu AT mailman.eng.auburn DOT edu
Subject: Re: [Veritas-bu] NetBackup changes

We do use tripwire. It gives us the "what" but not the "who".

One problem for auditing we've found is that the while the java gui can
log the command strings, there's always the command line to circumvent.
If you don't hand out root and only use the GUI, then you can add the
"-lc" option to the jnbSA command line and log the commands it runs in
the background.

So, write a wrapper script to jnbSA, add the "-lc" option and a specific
log file location like this and you're got something that might work.

example:

>cat jnb
/usr/openv/netbackup/bin/jnbSA -l
/usr/openv/netbackup/logs/gui_logs/$USER.`date +%y%m%d%H%M%S` -lc
 
...
It's not much but it keeps our auditors happy.


-----Original Message-----
From: veritas-bu-bounces AT mailman.eng.auburn DOT edu
[mailto:veritas-bu-bounces AT mailman.eng.auburn DOT edu] On Behalf Of Patrick
Sent: Friday, February 15, 2008 9:34 AM
To: 'Jimmy Stewpot'; veritas-bu AT mailman.eng.auburn DOT edu
Subject: Re: [Veritas-bu] NetBackup changes

You don't mention what OS, but perhaps "tripwire" or "big brother" would
be
of help.

Regards,

Patrick Whelan
Whelan Consulting Limited

VERITAS Certified NetBackup Support Engineer for UNIX.
VERITAS Certified NetBackup Support Engineer for Microsoft Windows.


-----Original Message-----
From: veritas-bu-bounces AT mailman.eng.auburn DOT edu
[mailto:veritas-bu-bounces AT mailman.eng.auburn DOT edu] On Behalf Of Jimmy
Stewpot
Sent: 15 February 2008 15:37
To: veritas-bu AT mailman.eng.auburn DOT edu
Subject: [Veritas-bu] Netbackup changes

Hello,

I am interested to know if anyone has or knows of any software which can

easily track the changes made in netbackup. We have a fairly large 
install and would like to be able to track who makes changes to what and

when for obvious reasons. I have had a look at the documentation but its

not clear if its possible in the "standard product". Does anyone have 
any advice that they can provide me?

Regards,

Jimmy
_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu

_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu

_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu

_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu