Trusted Solaris Audit Administration

Events in Audit Class fm

The following table lists in alphabetical order the file attribute modify class of audit events provided in the Trusted Solaris 8 4/01 release.

Table A–11 File Attribute Modify Audit Events (Default)

Audit Event Number and Event 

Where Described 

251

AUE_ACLSET

Table B–137

11

AUE_CHOWN

Table B–30

252

AUE_FACLSET

Table B–137

39

AUE_FCHMOD

Table B–42

38

AUE_FCHOWN

Table B–43

45

AUE_FLOCK

Placeholder 

544

AUE_FSETCMWLABEL

Table B–142

523

AUE_FSETFATTRFLAG

Table B–49

158

AUE_IOCTL

Table B–67

237

AUE_LCHOWN

Table B–69

525

AUE_LSETCMWLABEL

Table B–142

19

AUE_MCTL

No longer supported. 

524

AUE_MLDSETFATTRFLAG

Table B–76

542

AUE_SETCLEARANCE

Table B–141

549

AUE_SETCMWLABEL

Table B–142

541

AUE_SETCMWPLABEL

Table B–143

522

AUE_SETFATTRFLAG

Table B–146

550

AUE_SETFILEPRIV

Table B–147

551

AUE_SETPROCPRIV

Table B–151

202

AUE_UTIME

Table B–181

49

AUE_UTIMES

 

552

AUE_WRITEL

Table B–186

553

AUE_WRITEVL

9037

AUE_dtfile_copy

Table B–253

9038

AUE_dtfile_move

Table B–253