You can configure session transcripts for specific target
systems.
Before you begin
- Skip this task if you do not want to create session transcripts.
- If you install the s390-tools package as an RPM, the installation process might
set up the /var/log/ts-shell directory for you.
Procedure
Perform the following steps to configure session transcripts:
- Create a directory, /var/log/ts-shell,
for the session transcripts.
[root]# mkdir /var/log/ts-shell
- Change the group for the new directory to the
ts-shell group:
[root]# chown root:ts-shell /var/log/ts-shell
- Set the access permissions for the
directory, and future subdirectories, to which the session transcripts
are written:
[root]# chmod 2770 /var/log/ts-shell
- With your preferred editor, open /etc/iucvterm/ts-audit-systems.conf.
- List the z/VM® user
IDs, each on a separate line, of all target systems for which session
transcripts are to be created. The list entries are interpreted as
uppercase and, therefore, not case-sensitive.
Example: A file that configures session transcripts
for the target systems LXGUEST0 through LXGUEST4 might read:
lxguest0
lxguest1
lxguest2
lxguest3
lxguest4
Tips:
- Lists of z/VM user IDs
can be extensive. If you have access to the z/VM user directory, you
can use the vmur, grep, and cut commands
to create a list from the z/VM user
directory.
- You can configure session transcripts for all target system with
a single entry,
[*ALL*].
- Save and close the configuration file.
What to do next
Ensure that there is always sufficient disk space for new transcripts. For
example, use a cron job to monitor the available disk space and purge obsolete transcripts at
regular intervals according to your audit policies. If disk space runs out, no further transcripts
are written.