Safeguard Administrator's Manual (G06.29+, H06.08+, J06.03+)

Configuration
Safeguard Administrator’s Manual—523317-029
9-25
Configuring Auditing of All System Objects
AUDIT-DISKFILE-MANAGE-FAIL
Unsuccessful attempts to create or manage authorization records for a volume,
subvolume, or disk file are audited. This setting supplements the individual audit
settings. The conditions can be ALL, NONE, LOCAL, or REMOTE. The default is
NONE.
AUDIT-DISKFILE-PRIV-LOGON
specifies conditions for auditing attempts to perform a priv logon on the system.
This setting supplements the individual audit settings. The conditions can be ON or
OFF. The default is OFF.
For example, to specify auditing of successful and unsuccessful local attempts to
access a volume, subvolume, or disk file, in addition to the audit settings of the
individual authorization records for those objects:
=ALTER SAFEGUARD, AUDIT-DISKFILE-ACCESS LOCAL
Configuring Auditing of All System Objects
You can configure systemwide auditing of all system objects in addition to the audit
settings in the individual authorization records.
These Safeguard attributes relate to the auditing of system objects:
AUDIT-OBJECT-ACCESS-PASS
Successful attempts to access any system object are audited. This setting is
supplements the audit settings for the individual objects. The conditions can be
ALL, NONE, LOCAL, or REMOTE. The default is NONE.
AUDIT-OBJECT-ACCESS-FAIL
Unsuccessful attempts to access any system object are audited. This setting
supplements the audit settings for the individual objects. The conditions can be
ALL, NONE, LOCAL, or REMOTE. The default is NONE.
AUDIT-OBJECT-MANAGE-PASS
Successful attempts to create or manage authorization records for any system
object are audited. This setting supplements the audit settings for the individual
objects. The conditions can be ALL, NONE, LOCAL, or REMOTE. The default is
NONE.
AUDIT-OBJECT-MANAGE-FAIL
Unsuccessful attempts to create or manage authorization records for any system
object are audited. This setting supplements the audit settings for the individual
objects. The conditions can be ALL, NONE, LOCAL, or REMOTE. The default is
NONE.