ipc_perm Token

The ipc_perm token contains a copy of the System V IPC access information. This token is added to audit records that are generated by IPC shared-memory events, IPC semaphore events, and IPC message events. The ipc_perm token has eight fields:

• a token ID that identifies this token as an ipc_perm token

• the user ID of the IPC owner

• the group ID of the IPC owner

• the user ID of the IPC creator

• the group ID of the IPC creator

• the access modes of the IPC

• the sequence number of the IPC

• the IPC key value

The praudit command displays the ipc_perm token as follows:

IPC perm,root,wheel,root,wheel,0,0,0x00000000

The values are taken from the ipc_perm structure that is associated with the IPC object. The following figure shows the format of an ipc_perm token.

Figure 25–17 ipc_perm Token Format