System Administration Guide
Chapter 5, Maintaining system security
Using auditing on your system

Using auditing on your system

Auditing keeps detailed records of system usage, enabling you to determine if any tampering has occurred (attempted or successful). However, auditing can require additional supervision and disk space, depending on how long it is enabled. Auditing is discussed extensively in Chapter 6, ``Using the Audit Manager''.

NOTE: It is not necessary to keep auditing enabled. It can be a useful tool if tampering is suspected. Because most systems calls are recorded when auditing is enabled, it is also an excellent program debugging tool.