Return to audfmt.1 CVS log

Up to [Power 6/32 Unix Tahoe 4.2BSD] / cci / usr / src / man / man1

Power 6/32 Unix version 1.2b

.TH AUDFMT 1 01/03/84
.SH NAME
audfmt \- format audit trail log data
.SH SYNOPSIS
.B audfmt
[
.B \-o
outfile
]
[infile]
.SH DESCRIPTION
.I Audfmt\^
formats raw audit trail data.
.I Audfmt
reads the raw audit trail data from either the default
audit file (/usr/adm/audit) or
.I infile\^
if it is specified.
.I Audfmt\^
writes the formatted data to the standard output or to
.I outfile\^
if the
.B -o
option is specified.  The format of the output is as follows:
.PP
.RS
.B XY uid date cmd path
.PP
.RE
where X =
.PP
.RS
.B R
file was opened for reading
.PP
.B W
file was opened for writing
.PP
.B L
file was unlinked(removed)
.PP
.B N
audit status changed from off to on
.PP
.B F
audit status changed from on to off
.PP
.B E
file was executed
.PP
.RE
and Y =
.PP
.RS
.B S
attempt to access file was successful
.PP
.B U
attempt to access file was not successful
.RE
.PP
.B uid
- the user-id of the person performing the access
.PP
.B date
- the date and time of the access
.PP
.B cmd
- the command used to perform the access
.PP
.B path
- the pathname of the file accessed
.PP
While the audit trail facility is running the active logfile can not be
formatted.  The 
.I auditon\^
command may be used to change the current logfile.
.SH AUTHOR
Mark Monaghan
.SH SEE ALSO
audit(1), audit(2), auditon(1), auditoff(1), audon(2), ckaudit(2).

This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.