a_state

Purpose

     Records general and special auditing events.

Description

     The audit  state file, /local/etc/security/audit/a_state,
     is a text  file written by the auditsys  system call that
     records general and special audit events.

     Each  audit state  file contains  two stanzas.   One line
     beigns with  the keyword "general:", followed  by zero or
     more general event  names, one per line with  a tab char-
     acter in front of each.   After the general events, there
     is a line with the  keyword special:, followed by zero or
     more special event  names, one per line with  a tab char-
     acter in front of each.  Each event name must also appear
     in  the   audit  event  table,  contained   in  the  file
     /etc/security/audit/a_event.

Example

     An audit state file might look like the following:

       general:
             proc_create
             proc_delete
       special:
             shutdown

Files

     /etc/security/audit/a_event
     /local/etc/security/audit/a_state

Related Information

     In  this  book:   "audit,"  "auditsys,"  "a_event,"  and
     "audit."

     The audit  command in  the AIX Operating  System Commands
     Reference.

     &c2off.