System Administration Guide: Security Services

attribute Token

The attribute token contains information from the file vnode.

The attribute token has seven fields:

For further information about the file system ID and the device ID, see the statvfs(2) man page.

The attribute token usually accompanies a path token. The attribute token is produced during path searches. If a path-search error occurs, there is no vnode available to obtain the necessary file information. Therefore, the attribute token is not included as part of the audit record. The praudit -x command shows the fields of the attribute token:

<attribute mode="100644" uid="adm" gid="adm" fsid="136" nodeid="2040" device="0"/>