# Format: OS_user:TFM_role jdoe:tfm_admin asmith:tfm_operator raudit:tfm_auditor Define which events to audit in /opt/tfm/etc/audit_filter.conf :
# Always log user and role changes + user_add, user_mod, role_switch # Skip routine file reads - file_read 5.1. Manual Start /opt/tfm/bin/tfm_start Expected output: tfm tool 2.0.0 setup
ln -s /opt/tfm/bin/tfm_start /etc/init.d/tfm ln -s /etc/init.d/tfm /etc/rc3.d/S99tfm 6.1. Check Process ps -ef | grep tfm # Should show tfm_main and tfm_auditd processes 6.2. Test Role Login # Switch to admin role role login tfm_admin # Launch TFM menu tfm Expected menu: Test Role Login # Switch to admin role
# Check OS version uname -a svcs -a | grep audit # Solaris systemctl status auditd # Linux Ensure required packages pkg list | grep -i tfm # if using IPS 3. Installation Steps 3.1. Extract the Distribution Mount or untar the TFM 2.0.0 package: tfm tool 2.0.0 setup
[AUDIT] log_file = /var/audit/tfm/tfm.log max_size_mb = 100 retention_days = 90 Map OS users to TFM roles using /opt/tfm/etc/role_mapping.conf :
cd /tmp tar -xzvf tfm_tool_2.0.0.tar.gz cd tfm_tool_2.0.0 Execute the installation script:
[GLOBAL] audit_level = full session_timeout = 900 label_required = true [ROLES] admin_role = tfm_admin auditor_role = tfm_auditor operator_role = tfm_operator