Trusted Solaris Developer's Guide

Privileged Operations

The process needs the proc_audit_appl privilege in its effective set to call the auditwrite(3TSOL) routine and log third-party audit records to the audit trail. It is also required for any operations that get auditing information such as the audit state.