HP-UX Reference (11i v1 00/12) - 1M System Administration Commands A-M (vol 3)

__________________________________________________________________________________________________________________________________________________________________________________________________
__________________________________________________________________________________________________________________________________________________________________________________________________
STANDARD Printed by: Nora Chuang [nchuang] STANDARD
/build/1111/BRICK/man1m/!!!intro.1m
________________________________________________________________
___ ___
a
audsys(1M) audsys(1M)
A user process will be blocked in the kernel if all of the following events occurs:
• the file system containing current audit file is full,
• there is no next audit file or the next audit file is removed, and
• the user process makes an auditable system call or generates an auditable event.
To recover from the resulting deadlock, the session leader of the console is killed so that the the administra-
tor can login. Hence sensitive applicationsshould not be run as session leaders on the console.
AUTHOR
audsys was developed by HP.
FILES
/.secure/etc/audnames File maintained by audsys containing the "current" and "next" audit file
names and their switch sizes.
SEE ALSO
audit(5), audomon(1M), audctl(2), audwrite(2), audit(4), setsid(2).
Section 1M−−84 − 2 − HP-UX Release 11i: December 2000
___
___