Re: Running VMS off CD

From: Paul Sture (p_sture_at_elias.decus.ch)
Date: 07/05/03 

Date: 5 Jul 03 18:19:37 +0200

In article <20030705124532.30949.qmail@nym.alias.net>, Doc.Cypher <Use-Author-Address-Header@[127.1]> writes:
> On 5 Jul 2003, Kilgallen@SpamCop.net (Larry Kilgallen) wrote:
>>In article <20030705112951.28796.qmail@nym.alias.net>, Doc.Cypher
>><Use-Author-Address-Header@[127.1]> writes:
>>> On Fri, 04 Jul 2003, "David J. Dachtera" <djesys.nospam@fsi.net> wrote:
>>>>"Doc.Cypher" wrote:
>>>>> [snip]
>>>>> On a slightly related note, does anyone know of a package (available to
>>>>> Hobbyists) which gives similar functionality to the *ix package "tripwire"?
>>>>
>>>>Rather depends on what "tripwire" is and what it does. Care to
>>>>elucidate?
>>>
>>> I came up with half of the solution myself...
>>>
>>> $ SET SECURITY/ACL=((ALARM=SECURITY,ACCESS=WR+DE+CO+SUCCESS+FAILURE), -
>>> (AUDIT=SECURITY,ACCESS=WR+DE+CO+SUCCESS+FAILURE) <file>
>>>
>>> Now, how do I get an email notification sent when one of these conditions
>>> occurs?
>>
>>Set up a detached process running a program you write which establishes
>>an Audit Listener Mailbox. Write that program so that it will never quit
>>reading from the mailbox, as to do so would jam up the audit system.
>
> Thanks.
>
> I have some documentation studying to do now. :)
>

Larry is 100% correct there. If your process fails, the mailbox fills
up, and for example, example nobody can log in anymore.

In that case (assuming you are already logged into a suitable account),
COPY <audit_mailbox> SOMEFILE unjams the system.

Please see HELP SET AUDIT /LISTENER

Relevant Pages

  • Re: set audit/listener
    ... I think DCL will be to slow in case of huge flow of audit. ... device, say a mailbox. ... audit server to send you a copy of audit messages. ... Session 1> read audit_mbx record ...
    (comp.os.vms)
  • Re: Exchange and 565 Security Errors
    ... following Failure Audit in the event log. ... Mailbox That You Have Delegate Access To ... PLEASE NOTE the newsgroup SECURE CODE and PASSWORD were ...
    (microsoft.public.windows.server.sbs)
  • Re: set audit/listener
    ... as far as I understand the help, I may redirect audit events to a ... device, say a mailbox. ... audit server to send you a copy of audit messages. ... Session 1> read audit_mbx record ...
    (comp.os.vms)
  • Auditing mailbox access
    ... opens another user's mailbox? ... We need to audit our Domain ... Admins and make sure no one is reading mail when they ...
    (microsoft.public.exchange.admin)