Safeguard Audit Service Manual (G06.24+, H06.03+)

SAFEART Field Descriptions

Safeguard Audit Service Manual—520480-014

7-59

OSS Audit Attribute Record

A change in the audit attribute of a fileset from an SCF command is recorded in the

audit trail by the OSS Monitor. The change generates a pair of secondary records, one

to represent the audit attribute value before the attempt and one to represent the

attempted change to the audit attribute value.

This field appears in the text area representing the Audit Attribute record:

OssAuditAttrEnabled

if True, specifies that auditing is enabled for the fileset. Field value is True or False.

OSS Process Startup Record

A successful startup of an OSS process generates a secondary record containing the

startup attributes. If the process fails to start, the audit record generated is similar to an

audit record generated for a Guardian process failure.

These fields appear in the text area representing the Process Startup record:

OssExecProgramFile

specifies the physical file name in local format representing the OSS program file.

Field type is character.

OssExecOwnerUID

specifies the User ID of the owner. Field value is OSS UserID.

OssExecOwnerGID

specifies the Group ID. Field value is OSS GroupID.

OSS File Attributes Record

This record represents the OSS File Attributes. Depending on the type of the

operation, clients supply the necessary fields for auditing.

The number of secondary records generated depends on the type of operation.

One or more of these fields appears in the text area representing the File Attributes

record:

OssFileAttrMode

specifies the file mode. SAFEART displays this field in octal format, prefixed by a 0

(zero). For example 0100700 permits only the file owner to read, write, and

execute a regular file, whereas 040700 shows that the owner has read, write, and

search permissions for the directory. For more information, see the Open System

Services System Calls Reference Manual and the symbols specified in the

<sys/stat.h> header file.