5.10 Configuring Linux or UNIX Monitoring

Change Guardian monitors the following in Linux and UNIX environments:

This section provides the following information:

5.10.1 Implementation Checklist

Complete the following tasks to start monitoring Linux and UNIX events:

Task	See
Complete the prerequisites	Prerequisites
Add a license key	Adding a License Key
Configure Change Guardian for monitoring	Categories of UNIX Policies Assigning Policies and Policy Sets
Triage events	Section 7.0, Managing Events Section 8.0, Configuring Alerts

Ensure that you have completed the following:

Configuration Files: Policies about changing hostname resolution and process startup configuration

CRON: Policies to monitor accessing CRON job, and changing CROS task execution

Exported File System: Policies to monitor list of exported file system

File Integrity: Policies to monitor Security Agent for UNIX configuration and system message of the day

File System: Policies to monitor bash shell startup configuration

Groups: Policies to monitor inbuilt groups

Mount: Policies to monitor CD-ROM mounts

Process/Daemons: Policies to monitor system background processes, and execution of su and sudo commands

Users: Policies to monitor built-in users

For information about creating policies, see Creating Change Guardian Policies.

After creating policies, you can assign them to assets. For information about assigning policies, see Working with Policies.