Trusted Solaris Audit Administration

Events in Audit Class fm

The following table lists in alphabetical order the file attribute modify class of audit events provided in the Trusted Solaris 7 release.

Table A-9 File Attribute Modify Audit Events (Default)

Audit Event Number and Event 

Where Described 

251

AUE_ACLSET

Table B-129

11

AUE_CHOWN

Table B-30

252

AUE_FACLSET

Table B-129

39

AUE_FCHMOD

Table B-42

38

AUE_FCHOWN

Table B-43

45

AUE_FLOCK

Placeholder 

544

AUE_FSETCMWLABEL

Table B-133

523

AUE_FSETFATTRFLAG

Table B-49

158

AUE_IOCTL

Table B-66

237

AUE_LCHOWN

Table B-68

525

AUE_LSETCMWLABEL

Table B-133

19

AUE_MCTL

No longer supported. 

524

AUE_MLDSETFATTRFLAG

Table B-75

542

AUE_SETCLEARANCE

Table B-132

549

AUE_SETCMWLABEL

Table B-133

541

AUE_SETCMWPLABEL

Table B-134

522

AUE_SETFATTRFLAG

Table B-137

550

AUE_SETFILEPRIV

Table B-138

551

AUE_SETPROCPRIV

Table B-142

202

AUE_UTIME

Table B-167

49

AUE_UTIMES

 

552

AUE_WRITEL

Table B-172

553

AUE_WRITEVL

9037

AUE_dtfile_copy

Table B-238

9038

AUE_dtfile_move

Table B-238