Next | Prev | Up | Top | Contents | Index
Default Auditing
The default auditing environment is already set up when you install IRIX. You need not take any action to maintain the default auditing environment. Within your default IRIX distribution, there is a file called /etc/init.d/audit. This file contains the default audit trail initialization. The default auditing selections produce a full record of system activity with a minimum of disk-space usage. The following list contains all event types audited by default. (The individual event types are not described in this list, but a description for all event types is given in "Auditable Events".)
| sat_access_denied | sat_chdir | sat_chroot |
| sat_open | sat_file_crt_del | sat_file_crt_del2 |
| sat_file_write | sat_mount | sat_file_attr_write |
| sat_exec sat_sysacct | sat_fchdir | sat_tty_setlabel |
| sat_fd_attr_write | sat_proc_read | sat_proc_write |
| sat_proc_attr_write | sat_fork sat_exit | sat_proc_attr_write |
| sat_proc_attr_write2 | sat_svipc_create | sat_svipc_remove |
| sat_svipc_change | sat_bsdipc_create | sat_bsdipc_create_pair |
| sat_bsdipc_shutdown | sat_bsdipc_mac_change | sat_bsdipc_expl_addr |
| sat_hostid_set | sat_clock_set | sat_hostname_set |
| sat_domainname_set | sat_ae_custom | sat_ae_identity |
| sat_ae_dbedit | sat_ae_mount | |
Next | Prev | Up | Top | Contents | Index