Safeguard Audit Service Manual (G06.24+, H06.03+)

Specifying Auditing
Safeguard Audit Service Manual—520480-014
2-15
Controlling Auditing of NonStop Client Events
•
ZSFG-VAL-OBJ-OSSDISKFILE
•
ZSFG-VAL-OBJ-OSSFILESET
•
ZSFG-VAL-OBJ-OSSPROCESS
•
ZSFG-VAL-OBJ-SOCKET
•
ZSFG-VAL-OBJ-SYMLINK
Possible values of the Safeguard configuration attribute AUDIT-CLIENT-OSS are ON
and OFF. Initially, the attribute is set to ON.
Because auditing of NonStop clients can consume considerable system resources and
add a large number of records to your audit files, you might want to configure the
Safeguard subsystem to disable client auditing.
To disable audits generated by guardian clients, issue this SAFECOM command:
=ALTER SAFEGUARD, AUDIT-CLIENT-GUARDIAN OFF
To disable audits generated by OSS clients, issue this SAFECOM command:
=ALTER SAFEGUARD, AUDIT-CLIENT-OSS OFF
If you decide to leave client auditing (both Guardian and OSS) enabled, be aware that
some of the systemwide auditing attributes described in the following pages also affect
client auditing. For example, the AUDIT-PROCESS-ACCESS-PASS controls auditing
for successful client operations that pertain to processes and subprocesses.
Table 2-2 lists the common NonStop privileged subsystems or clients and the
corresponding audited objects and operations.
Note. The AUDIT-CLIENT-GUARDIAN attribute is a synonym for the AUDIT-CLIENT-SERVICE
attribute. The AUDIT-CLIENT-OSS attribute is supported only on systems running G06.29 and
later G-series RVUs and H06.08 and later H-series RVUs.
Note. If you leave client auditing enabled, be sure you have adequate system resources to
handle the additional audit activity.
Table 2-2. Clients and the Corresponding Audited Objects (page1of3)
Clients Audited Objects Audited Operations
GUARDIAN Process Zsfg^Val^Oper^Start
Zsfg^Val^Oper^Stop
RMI/ZMIOP RMI/ZMIOP Controller
Process
Zsfg^Val^Oper^Change^Owner
Zsfg^Val^Oper^Change
Zsfg^Val^Oper^Suspend
Zsfg^Val^Oper^Revive
BACKUP/RESTORE Command
Volume
Zsfg^Val^Oper^Create
Zsfg^Val^Oper^Read
$
OSS DP2 supports version 2 filesets and OSS Name Server supports version 3 filesets.