audusr.1m (2010 09)

audusr(1M) audusr(1M)

(TO BE OBSOLETED)

NAME

audusr - select users to audit

SYNOPSIS

audusr [[-a user ] ... ] [ [

-d user ] ... ] [-A-D]

DESCRIPTION

audusr is used to specify users to be audited or excluded from auditing. The

audusr command only

works for systems that have been converted to trusted mode.

To select users to audit on systems that have not been converted to trusted mode, use the

userdbset

command. See also audit (5), userdbset (1M), userdb (4), and

AUDIT_FLAG in security (4).

If no arguments are speciﬁed,

audusr displays the audit setting of every user. audusr is restricted to

privileged users.

Options

audusr recognizes the following options:

-a user Audit the speciﬁed user. The auditing system records audit records to the ‘‘current’’

audit ﬁle when the speciﬁed user executes audited events or system calls. Use

audevent to specify events to be audited (see audevent (1M)).

-d user Do not audit the speciﬁed user .

-A Audit all users.

-D Do not audit any users.

The

-A and -D options are mutually exclusive: that is, if -A is speciﬁed,

-d cannot be speciﬁed; if -D

is speciﬁed, -a cannot be speciﬁed.

Users speciﬁed with

audusr are audited (or excluded from auditing) beginning with their next login ses-

sion, until excluded from auditing (or speciﬁed for auditing) with a subsequent audusr invocation.

Users already logged into the system when audusr is invoked are unaffected during that login session;

however, any user who logs in after audusr is invoked is audited or excluded from auditing accordingly.

WARNINGS

HP-UX 11i Version 3 is the last release to support trusted systems functionality.

AUTHOR

audusr was developed by HP.

FILES

/tcb/files/auth/*/*

File containing ﬂags to indicate whether users are audited.

PAGE 1
audusr(1M) audusr(1M) (TO BE OBSOLETED) NAME audusr - select users to audit SYNOPSIS audusr [ [-a user ] ... ] [ [-d user ] ... ] [-A-D] DESCRIPTION audusr is used to specify user s to be audited or excluded from auditing. The audusr command only works for systems that have been converted to trusted mode. To select users to audit on systems that have not been converted to trusted mode, use the userdbset command. See also audit (5), userdbset (1M), userdb (4), and AUDIT_FLAG in security (4).
PAGE 2
(Notes) A (Notes) aA 2 Hewlett-Packard Company −1− HP-UX 11i Version 3: September 2010