Return to audfmt.1 CVS log

Up to [Power 6/32 Unix Tahoe 4.2BSD] / cci / usr / src / man / man1

Annotation of cci/usr/src/man/man1/audfmt.1, revision 1.1.1.1

1.1       root        1: .TH AUDFMT 1 01/03/84
                      2: .SH NAME
                      3: audfmt \- format audit trail log data
                      4: .SH SYNOPSIS
                      5: .B audfmt
                      6: [
                      7: .B \-o
                      8: outfile
                      9: ]
                     10: [infile]
                     11: .SH DESCRIPTION
                     12: .I Audfmt\^
                     13: formats raw audit trail data.
                     14: .I Audfmt
                     15: reads the raw audit trail data from either the default
                     16: audit file (/usr/adm/audit) or
                     17: .I infile\^
                     18: if it is specified.
                     19: .I Audfmt\^
                     20: writes the formatted data to the standard output or to
                     21: .I outfile\^
                     22: if the
                     23: .B -o
                     24: option is specified.  The format of the output is as follows:
                     25: .PP
                     26: .RS
                     27: .B XY uid date cmd path
                     28: .PP
                     29: .RE
                     30: where X =
                     31: .PP
                     32: .RS
                     33: .B R
                     34: file was opened for reading
                     35: .PP
                     36: .B W
                     37: file was opened for writing
                     38: .PP
                     39: .B L
                     40: file was unlinked(removed)
                     41: .PP
                     42: .B N
                     43: audit status changed from off to on
                     44: .PP
                     45: .B F
                     46: audit status changed from on to off
                     47: .PP
                     48: .B E
                     49: file was executed
                     50: .PP
                     51: .RE
                     52: and Y =
                     53: .PP
                     54: .RS
                     55: .B S
                     56: attempt to access file was successful
                     57: .PP
                     58: .B U
                     59: attempt to access file was not successful
                     60: .RE
                     61: .PP
                     62: .B uid
                     63: - the user-id of the person performing the access
                     64: .PP
                     65: .B date
                     66: - the date and time of the access
                     67: .PP
                     68: .B cmd
                     69: - the command used to perform the access
                     70: .PP
                     71: .B path
                     72: - the pathname of the file accessed
                     73: .PP
                     74: While the audit trail facility is running the active logfile can not be
                     75: formatted.  The 
                     76: .I auditon\^
                     77: command may be used to change the current logfile.
                     78: .SH AUTHOR
                     79: Mark Monaghan
                     80: .SH SEE ALSO
                     81: audit(1), audit(2), auditon(1), auditoff(1), audon(2), ckaudit(2).

This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.