Some Expected Events are Missing from Audit Trail in Solaris 10 Branded Zones

(Doc ID 2342349.1)

Last updated on FEBRUARY 28, 2018

Applies to:

Solaris Operating System - Version 10 3/05 to 10 1/13 U11 [Release 10.0]
Solaris x64/x86 Operating System - Version 10 3/05 to 10 1/13 U11 [Release 10.0]
Information in this document applies to any platform.

Symptoms

Consider the following example: 

The global zone is configured for auditing as follows:

Again, despite having the "as" audit class, mount/umount activities are not audited.  The "ex" preselection mask is also missing and no user commands are audited.

Changes

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms