Safeguard Audit Service Manual (G06.29+, H06.08+, J06.03+)

Audit File Record Formats
Safeguard Audit Service Manual — 520480-031
A - 16
Primary Audit Record
ZAUTHLOCNUMBER
is, as a 32-bit integer, the system number where the user was authenticated.
The value is zero if the system is remote and authentication information is not
available or if the subject is an NFS client.
ZAUTHLOCNAME
is, as an ASCII string, the name corresponding to ZAUTHLOCNUMBER. The
field is blank if the system is remote and authentication information is not
available or if the subject is an NFS client.
ZPROCESSNAME
is the process name or identifier of the subject. The field is set to all blanks if
the subject is an NFS client.
ZSUBSYSTEMID
is the SPI identifier of the subject subsystem.
ZTERMINALNAME
is, in external form, the terminal name of the subject process. If this value is not
available or if the subject is an NFS client, the field is set to all blanks.
ZAUDIT-CREATOR
is an instance of the ZSFG-DDL-GUARD-SUBJECT template that describes the
process that reported the audited event. The fields are the same as those
previously described for ZSUBJECT.
ZOBJECT
is an instance of the ZSFG-DDL-OBJECT-DES
C template that describes the object
of the event. The fields are:
ZOBJECT-TYPE
indicates the type of object. ZOBJECT-TYPE has one of these values:
ZSFG-VAL-OBJ-AUD-TR-CONFIG-REC
indicates an audit pool configuration record. The object name of an object
of this type is a name of an audit pool.
ZSFG-VAL-OBJ-COMMAND
indicates a command. The object name of an object of this type is an
ASCII string representation of the command.