Safeguard Audit Service Manual (G06.24+, H06.03+)

Audit File Record Formats
Safeguard Audit Service Manual—520480-014
A-92
OSS Process Group ID Record
OSS Process Group ID Record
A Process Group ID record is generated whenever there is a change in the process
group ID of a process. Setpgid() and setsid() can change the process group ID. The
change generates a pair of secondary records, one to represent the process group ID
(pgid) before the change and one to represent the changed process group ID.
Process Group ID records are also generated during OSS process startup. In this
case, a new secondary record is generated that represents the process group id to
which this newly created process belongs.
The process group ID record is represented in the ZTEXT-AREA of secondary audit
records with this template overlay:
DDL Definition
DEF ZSFG-DDL-OSSPROCGRP-SUBREC.
02 ZPROCESSGROUP-ID TYPE ZSPI-DDL-INT2.
END.
Field Definition
ZPROCESSGROUP-ID
is the process group ID.
OSS Process Set ID Record
A Process Set ID record is generated whenever the user or group IDs of a process are
changed by calls such as setuid(), setgid(), setreuid(), or setregid(). A pair of records is
generated, one for the value of the IDs before the operation and one for the value of
the IDs after the operation. The Process Set ID record is represented in the
ZTEXT-AREA of secondary audit records with this template overlay:
DDL Definition
DEF ZSFG-DDL-OSSPROCID-SUBREC.
02 ZVARIANT-TYPE TYPE ZSPI-DDL-UINT.
02 ZREAL-ID TYPE ZSPI-DDL-INT2.
02 ZEFFECTIVE-ID TYPE ZSPI-DDL-INT2.
02 ZSAVED-SET-ID TYPE ZSPI-DDL-INT2.
02 ZREAL-AUTHTYPE TYPE ZSPI-DDL-INT.
02 ZEFFECTIVE-AUTHTYPE TYPE ZSPI-DDL-INT.
02 ZSAVED-SET-AUTHTYPE TYPE ZSPI-DDL-INT.
END.