Configuring session transcripts for ts-shell

You can configure session transcripts for specific target systems.

Before you begin

  • Skip this task if you do not want to create session transcripts.
  • If you install the s390-tools package as an RPM, the installation process might set up the /var/log/ts-shell directory for you.

Procedure

Perform the following steps to configure session transcripts:
  1. Create a directory, /var/log/ts-shell, for the session transcripts.
    [root]# mkdir /var/log/ts-shell
  2. Change the group for the new directory to the ts-shell group:
    [root]# chown root:ts-shell /var/log/ts-shell
  3. Set the access permissions for the directory, and future subdirectories, to which the session transcripts are written:
    [root]# chmod 2770  /var/log/ts-shell
  4. With your preferred editor, open /etc/iucvterm/ts-audit-systems.conf.
  5. List the z/VM® user IDs, each on a separate line, of all target systems for which session transcripts are to be created. The list entries are interpreted as uppercase and, therefore, not case-sensitive.
    Example: A file that configures session transcripts for the target systems LXGUEST0 through LXGUEST4 might read:
    lxguest0
    lxguest1
    lxguest2
    lxguest3
    lxguest4
    Tips:
    • Lists of z/VM user IDs can be extensive. If you have access to the z/VM user directory, you can use the vmur, grep, and cut commands to create a list from the z/VM user directory.
    • You can configure session transcripts for all target system with a single entry, [*ALL*].
  6. Save and close the configuration file.

What to do next

Ensure that there is always sufficient disk space for new transcripts. For example, use a cron job to monitor the available disk space and purge obsolete transcripts at regular intervals according to your audit policies. If disk space runs out, no further transcripts are written.