Example—Displaying the Audit Record Formats of a Program
In this example, the format of all audit records that are generated by the login program are displayed.
% bsmrecord -p login
terminal login
program /usr/sbin/login see login(1)
event ID 6152 AUE_login
class lo (0x00001000)
header
subject
text error message or "successful login"
return
login: logout
program /usr/sbin/login see login(1)
event ID 6153 AUE_logout
class lo (0x00001000)
header
subject
text "logout" username
return
rlogin
program /usr/sbin/login see login(1) - rlogin
event ID 6155 AUE_rlogin
class lo (0x00001000)
header
subject
text success/fail message
return
telnet login
program /usr/sbin/login see login(1) - telnet
event ID 6154 AUE_telnet
class lo (0x00001000)
header
subject
text success/fail message
return
|
- © 2010, Oracle Corporation and/or its affiliates