Safeguard Audit Service Manual (G06.24+, H06.03+)

Audit File Record Formats
Safeguard Audit Service Manual—520480-014
A-85
OSS Process Startup Record
OSS Process Startup Record
Whenever a new process is started in an OSS environment, a process startup record
is generated on a successful startup. The process startup record is represented in the
ZTEXT-AREA of secondary audit record with this template overlay:
DDL Definition
DEF ZSFG-DDL-OSSAUDIT-SUBREC.
02 ZPROG TYPE ZSPI-DDL-BYTE OCCURS 44 TIMES.
02 ZUSER-ID TYPE ZSPI-DDL-INT2.
02 ZGROUP-ID TYPE ZSPI-DDL-INT2.
END.
Field Definitions
ZPROG
is the name of the physical file representing the OSS object. The program file
name is in the format:
$VOL.ZYQnnnnn.Ziiiiiii:ccccccccccc
where nnnnn is the fileset device number, iiiiiii is the file's inode number,
and ccccccccccc is the file's creation version sequence number (CRVSN).
ZUSER-ID
is the OSS user ID of the new process.
ZGROUP-ID
is the OSS group ID.
OSS File Attributes Record
Represents the OSS file attributes. Depending on the type of the operation, clients
supply the necessary fields. The number of secondary records generated depends on
the type of operation. For example, in case of a Create operation, only one secondary
record is present, whereas Change operation generates two secondary records. The
record is represented in the ZTEXT-AREA of secondary audit record with this template
overlay:
DDL Definition
DEF ZSFG-DDL-OSSFILEATTR-SUBREC.
02 ZVARIANT-TYPE TYPE ZSPI-DDL-UINT.
02 ZFILE-MODE TYPE ZSPI-DDL-INT2.
02 ZUSER-ID TYPE ZSPI-DDL-INT2.
02 ZGROUP-ID TYPE ZSPI-DDL-INT2.
02 ZRDEV TYPE ZSPI-DDL-INT4.