OSF DCE Administration Guide--Core Components

DCE Audit Service Administrative Tasks

dcecp> audﬁlter delete {foreign_principal /.../foreign_cell_name/jedwards}

The example command deletes the audit ﬁlter for the DCE principal jedwards in the

foreign cell /.../foreign_cell_name.

You can specify more than one ﬁlter to be operated on in the audﬁlter delete command.

As with the previous example of modifying ﬁlters, when deleting multiple ﬁlter, you

must use the standard dcecp syntax.

In order to execute this command, you must have write (w) permission to the audit

daemon’s ACL.

43.5.4 Default Filters

During the conﬁguration of the host (using dce_conﬁg), the following audﬁlter create

commands (using dcecp) are executed to create ﬁlters for the security daemon, the DTS

daemon, and the audit daemon:

audfilter create world -at {dce_sec_modify success log}

audfilter create world -at {dce_sec_modify {failure denial} all}

audfilter create world -at {dce_sec_server success log}

audfilter create world -at {dce_sec_server {failure denial} all}

audfilter create world -at {dce_sec_authent {failure denial} all}

audfilter create world -at {dce_sec_query denial all}

audfilter create world -at {dce_dts_mgt_modify success log}

audfilter create world -at {dce_dts_mgt_modify {failure denial} all}

audfilter create world -at {dce_dts_mgt_query {failure denial} all}

audfilter create world -at {dce_audit_admin_modify success log}

audfilter create world -at {dce_audit_admin_modify {failure denial} all}

audfilter create world -at {dce_audit_filter_modify success log}

audfilter create world -at {dce_audit_filter_modify {failure denial} all}

audfilter create world -at {dce_audit_admin_query {failure denial} all}

audfilter create world -at {dce_audit_filter_query {failure denial} all}

124243 Tandem Computers Incorporated 43−7