priv Token

The priv token contains use of privilege information. The fields are:

• A token ID

• A success/failure field indicating whether the use of privilege was successful (1 success, 0 failure)

• The privilege being tested

The following figure shows a priv token.

Figure B-23 priv Token Format

A priv token is displayed by praudit as follows:

useofpriv,failed use of priv,win_mac_write