Safeguard Audit Service Manual (G06.29+, H06.08+, J06.03+)

Hewlett-Packard Company — 520480-031
i
Safeguard Audit Service Manual
Index Examples Tables
Legal Notices
What’s New in This Manual ix
Manual Information ix
New and Changed Information ix
About This Manual xv
Organization of This Manual xv
Related Manuals xvi
Notation Conventions xvi
1. Introduction
Events Controlled by the Safeguard Subsystem 1-1
Safeguard Events That Must Be Specified 1-1
Safeguard Events That Are Always Audited 1-2
Events From NonStop OS Subsystems 1-2
The Audit Trail 1-2
Extracting Audit Information 1-3
2. Specifying Auditing
The Audit Attributes 2-1
Systemwide Audit Attributes 2-1
Special Audit Attributes for User Actions 2-2
Shorthand for Audit Attributes 2-2
Auditing User Authentication Attempts 2-2
How Attempts to Log On Are Audited 2-3
Auditing Automatic Logoffs 2-4
Auditing TACL Logoff 2-4
Auditing Attempts to Access Objects 2-5
How Attempts to Access Objects Are Audited 2-6
Rulings From the Event-Exit-Process 2-6
Auditing Attempts to Add Protection Records 2-7
How Attempts to Add Protection Records Are Audited 2-8