Safeguard Audit Service Manual (G06.29+, H06.08+, J06.03+)

Audit File Record Formats
Safeguard Audit Service Manual — 520480-031
A - 15
Primary Audit Record
ZSFG-VAL-OUTCOME-WARNING
The operation would have been denied, but the system was in Safeguard
warning mode.
ZMASTER-AUDITNUMBER
is a binary integer. It currently contains the same value as ZAUDITNUMBER.
ZSUBJECT
is an instance of the ZSFG-DDL-GUARD-SUBJECT template. For most events,
this template describes the process that attempted the audited operation. However,
for VERIFYUSER events, ZSUBJECT describes the process in control of the
terminal before the logon attempt. For LOGOFF events, ZSUBJECT describes the
logged-off user. For AUTHENTICATE events, ZSUBJECT describes the process
requesting the authentication. The component fields are:
ZSUBJECT-TYPE
is always ZSFG-VAL-GUARDIAN-USER.
ZUSERNUMBER
is, in internal form, the group number, member number of the subject.
ZUSERNAME
is either the group name.member name of the subject, or an alias name of
the subject, if used to gain access to the system.
ZCREATORNUMBER
is, in internal form, the group number, member number corresponding to
the CAID of the subject.
ZCREATORNAME
is, in external form, the group name.member name corresponding to the
CAID of the subject.
ZSYSTEMNUMBER
is, as a 32-bit integer, the system number of the subject. The field is set to -1 if
the subject is an NFS client.
ZSYSTEMNAME
is, as an ASCII string, the name corresponding to ZSYSTEMNUMBER. The
field is set to “NFS”
if the subject is an NFS client.