Safeguard Audit Service Manual (G06.29+, H06.08+, J06.03+)

SAFEART Field Descriptions
Safeguard Audit Service Manual — 520480-031
7 - 76
OSS Kill Record
OssFileAttrChangeTime
specifies the time of the last file status change. This is a 32-bit representation of
the timestamp. For more information, see the Open System Services System Calls
Reference Manual.
OssFileAttrPathName
if the object type is Symlink specifies the pathname of the file or contents of the
symbolic link. Field type is character.
OSS Kill Record
Audit is generated whenever a kill signal is queued for a target process or a group of
processes, depending on how the function is called.
These fields appear in the text area representing the Kill record:
OssKillSignalSent
specifies the signal sent by the kill operation. Field type is numeric.
OssKillProcGroupID
specifies the Process Group ID. When a signal is queued for a target group of
processes, this field contains the negative value of the Process Group ID.
SAFEART displays the actual process group ID. This field is not present if the
target of the kill operation is a process and not a process group. Field type is
numeric.
OssKillProcID
specifies the target process's identifier (PID). This field is not present if the target of
the kill operation is a process group and not a process. Field type is numeric.
OssKillReqEffUID
specifies the requestor's effective user ID. Field value is OSS UserID.
OssKillReqEffAuthType
specifies the requestor's effective authentication type. Field type is enumerated.
Possible values are: Local, Remote, Invalid, and Unauth.
OssKillReqRealUID
specifies the requestor's real user ID. Field value is OSS UserID.
OssKillReqRealAuthType
specifies the requestor's real authentication type. F
ield type is enumerated.
Possible values are: Local, Remote, Invalid, and Unauth.