Abstract: In Unix system,it is necessary to add module of control and audit based on users. By adding a net module called iplog in Solaris, the goal is fulfilled and therefore the safety of operation system is strengthened. It is shown that the method is effective solution with not very heavy load.

Key words: vist audit, visit control

摘要： 对于多用户的Unix需要有基于用户的网络访问控制和审计。通过在Solaris中编写网络模块iplog的方法，在内核之外实现了访问审计，增强了操作系统的安全性。实际使用结果表明这种方式在网络负载不大的情况下是一种有效的解决方式。

关键词: 网络审计, 访问控制