Safeguard Audit Service Manual (G06.29+, H06.08+, J06.03+)

Audit File Record Formats
Safeguard Audit Service Manual 520480-031
A - 76
Safeguard Configuration Record
ZAUDIT-EXC-VALUE4
specifies value for the respective field name in the zaudit-exc-field.
ZAUDIT-EXC-VALUE5
specifies value for the respective field name in the zaudit-exc-field.
ZAUDIT-OSS-FILTER
indicates, if true, that user level attributes AUDIT-USER-ACTION-PASS and
AUDIT-USER-ACTION-FAIL enable or disable OSS auditing. The AUDIT-OSS-
FILTER attribute takes effect only if the Safeguard global configuration attribute
AUDIT-CLIENT-OSS is enabled. The default is OFF.
ZAUDIT-TACL-LOGOFF
controls generation of audits for the TACL LOGOFF or TACL EXIT operations.
When set to TRUE, audits for the TACL LOGOFF or TACL EXIT operations are
generated based on the value of the ZSFG-TKN-AUDIT-AUTHENTICATE-PASS
and ZSFG-TKN-AUDIT-AUTHENTICATE-FAIL tokens.
When set to FALSE, audits for the TACL LOGOFF or TACL EXIT operations are
generated based on the value of the ZSFG-TKN-AUDIT-CLIENT-GUARDIAN,
ZSFG-TKN-AUDIT-PROCESS-ACCESS-PASS, and ZSFG-TKN-AUDIT-PROCESS-
ACCESS-FAIL tokens.
The default is FALSE.
ZDYNAMIC-PROC-UPDATE
ON indicates that the process identity attributes (AUDIT
-USER-ACTION-PASS,
AUDIT-USER-ACTION-FAIL, primary group, supplementary group list, and group
count) are updated dynamically when the audit and group attributes of the
corresponding user are modified.
The default is OFF.
Note. The ZAUDIT-EXC-FIELD, ZAUDIT-EXC-VALUE1, ZAUDIT-EXC-VALUE2, ZAUDIT-
EXC-VALUE3, ZAUDIT-EXC-VALUE4 and ZAUDIT-EXC-VALUE5 attributes are supported
only on systems running J06.03 and later J-series RVUs, H06.14 and later H-series RVUs, and
G06.32 and later G-series RVUs.
Note. The ZAUDIT-OSS-FILTER audit record field is supported only on systems running
J06.04
and later J-series RVUs and H06.15 and later H-series RVUs.
Note. The
AUDIT-TACL-LOGOFF attribute is supported only on systems running
J06.08 and later J-series RVUs, H06.19 and later H-series RVUs, and G06.32 and later G-
series RVUs.
Note. The
ZDYNAMIC-PROC-UPDATE attribute is supported only on systems running
J06.10 and later J-series RVUs and H06.21 and later H-series RVUs.