Safeguard Audit Service Manual (G06.24+, H06.03+)

Audit File Record Formats
Safeguard Audit Service Manual—520480-014
A-89
OSS Kill Record
ZSFG-VAL-ACETYPEID-OPT-USER
indicates that the ACETYPEID is optional user.
ZSFG-VAL-ACETYPEID-OPT-GROUP
indicates that the ACETYPEID is optional group.
ZSFG-VAL-ACETYPEID-DEF-USER
indicates that the ACETYPEID is default owning user.
ZSFG-VAL-ACETYPEID-DEF-GROUP
indicates that the ACETYPEID is default owning group.
ZSFG-VAL-ACETYPEID-DEF-CLASS
indicates that the ACETYPEID is default class.
ZSFG-VAL-ACETYPEID-DEF-OTHER
indicates that the ACETYPEID is default other.
ZSFG-VAL-ACETYPEID-DEFOPT-USER
indicates that the ACETYPEID is default optional user.
ZSFG-VAL-ACETYPEID-DEFOPT-GROUP
indicates that the ACETYPEID is default owning group.
OSS Kill Record
A Kill record is generated whenever a signal is queued for a target process or a group
of processes, depending on how the function is called. If kill() is called with a
positive OSS process ID (pid), the process with process ID pid receives the signal if
the calling process has permission to kill the target. If kill() is called with a negative
process group ID (pgid), all processes with process group ID pgid that the caller has
permission to kill receive the signal. In this case, the target information is not present in
the audit record. The kill record is represented in the ZTEXT-AREA of secondary audit
record with this template overlay:
DDL Definition
DEF ZSFG-DDL-OSSKILL-SUBREC.
02 ZSIGNAL TYPE ZSPI-DDL-INT2.
02 ZPROCESSGROUP-ID-PID TYPE ZSPI-DDL-INT2.
02 ZEUID-REQUESTOR TYPE ZSPI-DDL-INT2.
02 ZRUID-REQUESTOR TYPE ZSPI-DDL-INT2.
02 ZRUID-TARGET TYPE ZSPI-DDL-INT2.
02 ZSUID-TARGET TYPE ZSPI-DDL-INT2.