HP-UX Role-Based Access Control B.11.31.05.01 Release Notes

4 Fixes

HP-UX RBAC B.11.31.05.01 contains the following keystroke logging fixes and enhancements:

• Keystroke logging of ssh sessions is supported. HP-UX Secure Shell version A.05.80.004 or

later must be installed.

• Keystroke logging of a full session is supported. For details, see key_filter(4) and keystroke(5).

• The /etc/rbac/key_filter configuration file supports the use of regular expressions to

specify the pattern trigger and supports the ability to specify a system-wide keystroke logging

policy that applies to all users, in addition to a per-user, per-group, and per-role policy. For

details, see key_filter(4) and keystroke(5).

• Two new manpages are introduced:

keystroke(5)◦

◦ pam_keystroke(5)

These two new manpages contain a detailed description of the keystroke logging feature.

• Keystroke log files are created with informative names that include the user name, remote

service name, and login date.

• The number of output characters saved per line of input prior to the triggering of keystroke

logging is configurable. For details, see rbac.conf(4).

• Various other minor defect fixes are included.