OpenBSM not catching all file writes

view story

http://www.unix.com – I have a custom auditing class configured for these events but it doesn't seem to be catching it when I do a "echo hey > test.txt" Any ideas on why that is? ---------- Post updated at 06:04 PM ---------- Previous update was at 05:47 PM ---------- Scratch this topic, it looks like it's because bash is doing an open64() which for some reason BSM on the Solaris 9 machine isn't catching. (HowTos)