Safeguard Audit Service Manual (G06.29+, H06.08+, J06.03+)

Audit File Record Formats
Safeguard Audit Service Manual — 520480-031
A - 9
Primary Audit Record
ZSFG-VAL-OPER-CONNECT
indicates the establishment of a connection between UNIX datagram sockets
when a connect operation is performed on the object socket. This description is
used for OSS sockets.
ZSFG-VAL-OPER-CHANGE-OWNER
indicates an explicit change in object ownership made by a command such as
the FUP GIVE command.
ZSFG-VAL-OPER-CHANGEPRIORITY
indicates a change to the priority of a process or process pair.
ZSFG-VAL-OPER-CHANGESTEPMOM
indicates a change to the stepmom of a process or process pair.
ZSFG-VAL-OPER-CLOSE
indicates the termination of a connection between an object and a subject
when an object is closed.
ZSFG-VAL-OPER-COMPOSITE
is supported for GIVE, PROGID, and LICENSE operations.
ZSFG-VAL-OPER-CREATE
indicates the creation of an object.
ZSFG-VAL-OPER-DEBUG
indicates a request to put a process in debug mode.
ZSFG-VAL-OPER-DELETE
indicates the deletion of part of an object or a portion of it
s contents. On
completion of this operation, the affected object remains in existence.
ZSFG-VAL-OPER-ENABLE
indicates a TMF ENABLE operation.
Note. This is supported only on systems running H06.26 and later H-series RVUs and
J06.15 and later J-series RVUs.
Note. When a process tries to alter its own priority by p
assing process name as process
information to the ALTERPRIORITY call, the operation is audited. However, if a process
tries to alter its own priority by passing cpu, pin as process information to
ALTERPRIORITY call, the operation is not audited. This is done to avoid flooding of
Safeguard audit logs by DP2 processes that frequently change their own priority. The
operation is audited whenever a process alters the priority of another process..