HP-UX Reference (11i v2 04/09) - 1M System Administration Commands A-M (vol 3)

a
audevent(1M) audevent(1M)
removable Removable media events. For example, mounting and unmounting events.
login Login and logout events not related to any particular system call.
admin All administrative and privileged events.
ipccreat Interprocess Communication (IPC) object creation.
ipcopen IPC object opening.
ipcclose IPC object deletion.
ipcdgram IPC Datagram transactions.
uevent1 User-defined event 1 (for self-auditing records).
uevent2 User-defined event 2 (for self-auditing records).
uevent3 User-defined event 3 (for self-auditing records).
System Call Name Mapping Exceptions
The following are some important known system call name mapping exceptions:
sem_open() is referred to as ksem_open().
sem_unlink()
is referred to as ksem_unlink()
.
sem_close()
is referred to as ksem_close().
gethostname(),
sethostname(), uname(), ustat(), setuname() are all referred to as
utssys() by the auditing system.
WARNINGS
All modifications made to the auditing system are lost upon reboot.
To make the changes permanent, set AUDEVENT_ARGS1
, AUDEVENT_ARGS2,orAUDEVENT_ARGS3
in
/etc/rc.config.d/auditing
.
AUTHOR
audevent was developed by HP.
SEE ALSO
audisp(1M), audomon(1M), audsys(1M), audusr(1M), getevent(2), setevent(2), audit(4), audit(5).
HP-UX 11i Version 2: September 2004 − 2 − Hewlett-Packard Company Section 1M−−49