Question : Audit, log and RBAC on AIX

I'm moving my system to RBAC. I've setup my authorizations, roles and everything is working fine.
Question:

Which is the best way to log or audit RBAC on AIX6?

Answer : Audit, log and RBAC on AIX

Hi,

there are several events which you could audit.

Besides the already known events for mkrole, chrole and rmrole
        ROLE_Create
        ROLE_Change
        ROLE_Remove  

there are some new ones - referring to the new API functions, e.g. setroles(), sec_getrolebyid() and similar.
       PROC_SetRoles  
        SEC_GetRoleById
        SEC_GetRoleByNm
        SEC_RoleIdToNm  
       SEC_RoleNmToId  

Besides that auditing does not differ between RBAC-enabled and non RBAC-enabled systems.

As for logging - there is /var/adm/rolelog, and most of RBAC is syslog aware (facilities auth|security).

wmp