The path token contains access path information for an object. The fields are:
A token ID
A byte count of the path length (does not show)
An absolute path to the object based on the real root of the system
The following figure shows the token format.
A path token is displayed by praudit as follows:
path,/etc/security/audit/patchwork