In this example, the format of all audit records in the fd class are displayed.
% bsmrecord -c fd
ftruncate
Not used.
truncate
Not used.
unlink
system call unlink see unlink(2)
event ID 6 AUE_UNLINK
class fd (0x00000020)
header
path
[attribute]
subject
return
|