Trusted Solaris Audit Administration

process Token

The process token contains information describing a process as an object such as the recipient of a signal. The fields are:

The following figure shows the token format.

Figure B-25 Format for process and subject Tokens

Graphic

The audit ID, user ID, group ID, process ID, and session ID are long instead of short.


Note -

The process token fields for the session ID, the real user ID, or the real group ID may be unavailable. The entry is then set to -1.


A process token is displayed by praudit as follows:

process,root,root,wheel,root,wheel,0,0,0,0.0.0.0