Safeguard Audit Service Manual (G06.24+, H06.03+)

SAFEART Field Descriptions
Safeguard Audit Service Manual—520480-014
7-26
Protection Record
LuCiPri
specifies the priority at which to run the command interpreter specified by
LuCiProg. Field type is numeric.
LuCiProg
specifies the object file of the command interpreter that is started after user
authentication at this terminal. This object file is used if no command interpreter is
specified for the user. This field is blank if no value has been specified. Field type
is character.
LuCiSwap
specifies the swap volume or file used with the command interpreter specified by
LuCiProg. This field is blank if no value has been specified. Field type is character.
LuFreeze
specifies, if True, that this terminal definition is frozen. Field type is True or False.
LuTerminalName
specifies the name of the terminal to which this record refers. Field type is
character.
Protection Record
The Safeguard subsystem maintains a protection record for each object for which it
maintains an access control list. Protection records include:
•
Object authorization records
•
Security-group authorization records
•
OBJECTTYPE authorization records
Attempts to add, change, delete, or read these records might be audited depending on
whether auditing has been specified for such events.
If auditing is specified and an attempt is made to add, delete, or read an authorization
record, two secondary audit records (one pair) are generated. If auditing is specified
and an attempt is made to change an authorization record, four audit records (two
pairs) are generated. The first pair contains an image of the authorization record before
the attempted change, and the second pair contains an image of the authorization
record showing the attempted change. These attributes appear in the text area of the
first secondary record of each pair of audit records generated when auditing is
specified and the appropriate action is done:
Aclentries
is a repeated structure, each instance of which represents an ACL entry. Each
entry occurs on a separate line. The component items of each line (as they appear