Hi guys.

I have to set audit logs on certain events on a solaris 10 server.

While I had no problems on linux, I'm going crazy to do the same thing on solaris 10, since I don't have enough expertise on this OS .

I should be able to identify these 4 different events:



1: Tracking all the activities performed by root account

2: Tracking all privilege escalation performed by sudo or su command

3: Tracking all account removal/add in the system

4: Detects system time changes which are not done by a local service or a service account.



Can you give me a hand? Thanks a lot to everyone!