Safeguard Audit Service Manual (G06.24+, H06.03+)

Audit File Record Formats
Safeguard Audit Service Manual—520480-014
A-84
OSS Access Mode Record
ZMTIME
is the date and time of last modification.
ZCTIME
is the time of the last file status change.
OSS Access Mode Record
Any attempt to determine the accessibility of a file is audited. The access mode is
represented in the ZTEXT-AREA of secondary audit record with this template overlay:
DDL Definition
DEF ZSFG-DDL-OSSACCESS-SUBREC.
02 ZACCESS-MODE TYPE ZSPI-DDL-INT2.
END.
Field Definitions
ZACCESS-MODE
is the type of accessibility of the file requested by the subject.
OSS Audit Attribute Record
A change in the audit attribute of a file set from an SCF command is recorded in the
audit trail by the OSS Monitor. The change generates a pair of secondary records, one
to represent the audit attribute value before the attempt and one to represent the
attempted change to the audit attribute value. The audit attribute record is represented
in the ZTEXT-AREA of secondary audit records with this template overlay:
DDL Definition
DEF ZSFG-DDL-OSSAUDIT-SUBREC.
02 ZAUDIT-ENABLE-ATTR TYPE ZSPI-DDL-UINT.
END.
Field Definitions
ZAUDIT-ENABLE-ATTR
indicates whether the OSS fileset represented by the Objectname is audited. A
nonzero value indicates the fileset is audited.