HP-UX Reference (11i v1 05/09) - 1M System Administration Commands A-M (vol 3)

audusr(1M) audusr(1M)

NAME

audusr - select users to audit

SYNOPSIS

audusr [[-a user ] ...] [[

-d user ] ...] [-A-D]

DESCRIPTION

audusr is used to specify users to be audited or excluded from auditing. If no arguments are speciﬁed,

audusr displays the audit setting of every user.

audusr is restricted to super-users.

Options

audusr recognizes the following options:

-a user Audit the speciﬁed user. The auditing system records audit records to the ‘‘current’’

audit ﬁle when the speciﬁed user executes audited events or system calls. Use

audevent to specify events to be audited (see audevent(1M)).

-d user Do not audit the speciﬁed user.

-A Audit all users.

-D Do not audit any users.

The -A and -D options are mutually exclusive: that is, if -A is speciﬁed, -d

cannot be speciﬁed; if -D

is speciﬁed, -a cannot be speciﬁed.

Users speciﬁed with audusr are audited (or excluded from auditing) beginning with their next login ses-

sion, until excluded from auditing (or speciﬁed for auditing) with a subsequent audusr invocation. Users

already logged into the system when

audusr is invoked are unaffected during that login session; how-

ever, any user who logs in after audusr is invoked is audited or excluded from auditing accordingly.

AUTHOR

audusr was developed by HP.

FILES

/tcb/files/auth/*/*

File containing ﬂags to indicate whether users are audited.