audclassmap(1M) DG/UX B2 Security R4.12MU02 audclassmap(1M)
NAME
audclassmap - change audit subsystem mapping of events to classes
SYNOPSIS
audclassmap
DESCRIPTION
The audclassmap command updates the kernel audit subsystem class
mapping tables based upon the information in the file
/etc/tcb/audit/audit_event_defs. The command events in this file are
processed first and updated in the kernel audit subsystem. If this
is successful, then the kernel events are processed and updated.
This means that the commands event-to-class mapping can be updated
while the kernel event-to-class mapping is not, due to an error
during the processing of the kernel events-to-class mapping.
FILES
/etc/tcb/audit/audit_event_defs
DIAGNOSTICS
audclassmap writes all diagnostic to standard error.
audclassmap exits with one of the following values:
0 audclassmap executed normally.
1 audclassmap did not update both the commands and the kernel
class mapping tables. An error message explaining the problem
is output. If the error occurred during the processing of the
kernel mapping table, the commands mapping table was
successfully updated.
SEE ALSO
dg_auditctl(2), audit_event_defs(4M).
Licensed material--property of copyright holder(s)