XYGATE Access Control Reference Manual

XYGATE
®
Access Control Reference Manual
Appendix A: The ACCONF File
XYPRO Technology Corporation 96 Proprietary and Confidential
A4: AUDIT (Process Name)
Any one of the nine available AUDIT keyword entries can be defined as a process
audit trail. The most common process audits are EMS and printing to the CONSOLE.
Refer to Chapter 7, “XAC Auditing and Audit Reports” for more information.
Syntax:
AUDIT <$process-name> [CONSOLEPRINT] [CRITICAL] [DETAIL] [EMS] [INVOKE]
CONSOLEPRINT
The optional CONSOLEPRINT sub-keyword causes messages that are logged to EMS
to also print on the console.
CRITICAL
The CRITICAL keyword causes only records that audit a failed command to be written
to the file.
DETAIL
The optional DETAIL sub-keyword includes audit of specific tasks or commands that
were performed by the user in this session.
EMS
The optional EMS sub-keyword is used to generate Event Management System (EMS)
format audits. It should be used only when auditing to $0 or an EMS alternative
collector.
INVOKE
The optional INVOKE sub-keyword includes audits on how the session was started;
from what user, on which terminal, at what time and with what startup command.
Example 1: Create an EMS alternative collector
$VIK IK 12> EMSACOLL /NAME $IKXAC, NOWAIT, IN $VHS, OUT $VHS, TERM $VHS/
Example 2: Configure AUDIT <$process-name>
AUDIT $IKXAC DETAIL INVOKE EMS