NAME

auditmask_style − Audit configuration file for auditconfig

DESCRIPTION

The auditmask_style file shadows the /etc/sec/event_aliases file for use by the auditconfig utility.  Event aliases only need to occur in the auditmask_style file if the audit mask style requires a specific setting. 

Specifying an entry turns it on.  There is no explict turning off using this file.  Note that the obj_sel alias overides the obj_desel alias. 

The -s option in the auditmask(8) reference page contains more detail for valid entries.  Valid characters other than the object categories and aliases are "#", ":", and white space. 

FILES

/usr/share/sysman/menu/tasks/auditconfig/auditconfig
The auditconfig utility executable. 

/etc/sec/event_aliasesAudit event alias configuration file

/etc/sec/audit_eventsAudit events. 

/etc/sec/file_objectsAudit events... 

/etc/sec/fs_objectsAudit events... 

/etc/sec/auditd_clients
Audit events...

/etc/sec/rc_audit_events
Audit event...

RELATED INFORMATION

Commands: auditmask(8), auditd(8), auditconfig(8)

Security