upriv Token

The upriv token contains use of privilege information. The fields are:

• A token ID

• A success/failure field indicating whether the use of privilege was successful (1 success, 0 failure)

• The privilege being tested

The following figure shows a priv token.

Figure B–32 upriv Token Format

A upriv token is displayed by praudit as follows:

use of privilege,failed use of priv,win_mac_write