SunSHIELD Basic Security Module Guide

User-Level Events

Events generated by application software outside the kernel range from 2048 to 65535. The event names begin with AUE_, followed by a lowercase mnemonic for the event. Check the file, /etc/security/audit_event, for exact numbers of individual events. Table 2-1 shows general categories of user-related events.

Table 2-1 Audit Event Categories

Number Range 

Type of Event 


User-level audit events 


Reserved for SunOS user-level programs 


Available for third-party applications