Safeguard Audit Service Manual (G06.24+, H06.03+)

Hewlett-Packard Company—520480-014
i
Safeguard Audit Service Manual
Index Examples Tables
What’s New in This Manual ix
Manual Information ix
New and Changed Information ix
About This Manual xiii
Organization of This Manual xiii
Related Manuals xiv
Notation Conventions xiv
1. Introduction
Events Controlled by the Safeguard Subsystem 1-1
Safeguard Events That Must Be Specified 1-1
Safeguard Events That Are Always Audited 1-2
Events From NonStop OS Subsystems 1-2
The Audit Trail 1-2
Extracting Audit Information 1-3
2. Specifying Auditing
The Audit Attributes 2-1
Systemwide Audit Attributes 2-1
Special Audit Attributes for User Actions
2-2
Shorthand for Audit Attributes
2-2
Auditing User Authentication Attempts 2-2
How Attempts to Log On Are Audited 2-3
Auditing Automatic Logoffs 2-4
Auditing Attempts to Access Objects 2-4
How Attempts to Access Objects Are Audited 2-5
Rulings From the Event-Exit-Process 2-6
Auditing Attempts to Add Protection Records 2-6
How Attempts to Add Protection Records Are Audited 2-7
Auditing Attempts to Manage Protection Records 2-8
Examples 2-10
How Attempts to Manage Protection Records Are Audited 2-10