a_action

Purpose

     Associates  an audit  action  name with  an audit  action
     identifier.

Description

     The  /etc/security/audit/a_action file  is  a table  file
     (see "tbl") that associates audit action names with audit
     action identifiers.   Audit action names  and identifiers
     are unique.   Audit action identifiers  from A_MINSYSCALL
     to A_MAXSYSCALL inclusive are  reserved for system calls,
     audit   action   identifiers    from   A_MINKROUTINE   to
     A_MAXKROUTINE inclusive  are reserved for  kernel subrou-
     tines, and audit action identifiers from A_MINLOGEVENT to
     A_MAXLOGEVENT  inclusive  are  reserved  for  user  level
     actions.    The   /usr/include/sys/audit.h  header   file
     defines the A_ family of manifest constants.

     Each entry in the action table has the following format:

          action_name:action_id:comment

Example

     An example entry is:

       fork:2:fork system call

File

     /etc/security/audit/a_action

Related Information

     In this  book:  "audit,"  "auditlog,"  "tbl,"  "a_event,"
     and "audit."

     The  audit  and auditpr  commands  in  the AIX  Operating
     System Commands Reference.