SAP Security Note
Low priority
SAP security note 754273, “Availability of the system audit”, is an advance development note released on October 8, 2009. Below is the SAP recommended solution.
Description
Solution
To achieve the availability of the system audit in SAP_BASIS, the following steps are outlined:
- Support Packages: ensure that the necessary support packages are implemented in the SAP_BASIS component. For SAP_BASIS 620: SAPKB62043 and SAPKB62044. For SAP_BASIS 640: SAPKB64005 and SAPKB64009.
- Transaction and authorization roles: configure the required transaction and authorization roles using PFCG. Copy the roles into the customer namespace and assign them to users as needed.
- Modifying roles: if there are any extensions or reductions in transaction roles, corresponding modifications must be made to the authorization roles to ensure consistency and proper authorization.
- References to documentation: set up references to necessary documentation using SAPscript, Knowledge Warehouse, SAP Library, IMG documentation, and web addresses.
Full note on SAP: SAP Support Launchpad note 754273
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
