Safeguard Audit Service Manual (G06.29+, H06.08+, J06.03+)

Audit File Record Formats
Safeguard Audit Service Manual — 520480-031
A - 97
OSS Access Mode Record
DDL Definition
DEF ZSFG-DDL-OSSUTIME-SUBREC.
02 ZATIME TYPE ZSPI-DDL-INT2.
02 ZMTIME TYPE ZSPI-DDL-INT2.
02 ZCTIME TYPE ZSPI-DDL-INT2.
END.
Field Definitions
ZATIME
is the date and time of last access.
ZMTIME
is the date and time of last modification.
ZCTIME
is the time of the last file status change.
OSS Access Mode Record
Any attempt to determine the accessibility of a file is audited. The access mode is
represented in the ZTEXT-AREA of secondary audit record with this template overlay:
DDL Definition
DEF ZSFG-DDL-OSSACCESS-SUBREC.
02 ZACCESS-MODE TYPE ZSPI-DDL-INT2.
END.
Field Definitions
ZACCESS-MODE
is the type of accessibility of the file requested by the subject.
OSS Audit Attribute Record
A change in the audit attribute of a file set from an SCF command is recorded in the
audit trail by the OSS Monitor. The number of secondary records generated depends
on the type of command executed. For example, in case of an Add command, only one
secondary record is generated, whereas an Alter command generates two secondary
records. In case of one secondary record, the values represent the attempted change
to the audit attribute value. In case of two secondary records, the first record
represents the audit attribute value before the attempt and the second one represents
the attempted change to the audit attribute value. The audit attribute record is
represented in the ZTEXT-AREA of secondary audit records with this template overlay: