We do use tripwire. It gives us the "what" but not the "who".

One problem for auditing we've found is that the while the java gui can
log the command strings, there's always the command line to circumvent.
If you don't hand out root and only use the GUI, then you can add the
"-lc" option to the jnbSA command line and log the commands it runs in
the background.

So, write a wrapper script to jnbSA, add the "-lc" option and a specific
log file location like this and you're got something that might work.

example:

>cat jnb
/usr/openv/netbackup/bin/jnbSA -l
/usr/openv/netbackup/logs/gui_logs/$USER.`date +%y%m%d%H%M%S` -lc
 
...
It's not much but it keeps our auditors happy.


-----Original Message-----
From: veritas-bu-bounces AT mailman.eng.auburn DOT edu
[mailto:veritas-bu-bounces AT mailman.eng.auburn DOT edu] On Behalf Of Patrick
Sent: Friday, February 15, 2008 9:34 AM
To: 'Jimmy Stewpot'; veritas-bu AT mailman.eng.auburn DOT edu
Subject: Re: [Veritas-bu] NetBackup changes

You don't mention what OS, but perhaps "tripwire" or "big brother" would
be
of help.

Regards,

Patrick Whelan
Whelan Consulting Limited

VERITAS Certified NetBackup Support Engineer for UNIX.
VERITAS Certified NetBackup Support Engineer for Microsoft Windows.


-----Original Message-----
From: veritas-bu-bounces AT mailman.eng.auburn DOT edu
[mailto:veritas-bu-bounces AT mailman.eng.auburn DOT edu] On Behalf Of Jimmy
Stewpot
Sent: 15 February 2008 15:37
To: veritas-bu AT mailman.eng.auburn DOT edu
Subject: [Veritas-bu] Netbackup changes

Hello,

I am interested to know if anyone has or knows of any software which can

easily track the changes made in netbackup. We have a fairly large 
install and would like to be able to track who makes changes to what and

when for obvious reasons. I have had a look at the documentation but its

not clear if its possible in the "standard product". Does anyone have 
any advice that they can provide me?

Regards,

Jimmy
_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu

_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu

_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu