NAME

auclassmgmt − manages the audit class file

SYNOPSIS

auclassmgmt [ name ... ]
auclassmgmt [ -q ] [ -iclassID ] [ -d"description" ] name
auclassmgmt [ -q ] -a name classID [ "description" ]
auclassmgmt [ -q ] -x name [ name ... ]

DESCRIPTION

auclassmgmt allows root to manage the audit class file, /var/security/auclass.  If auclassmgmt is invoked without any parameters, the class IDs and descriptions for all classes in the audit class file will be printed to standard output.  If auclassmgmt is invoked with only audit class names for parameters, the class IDs and descriptions for the supplied classes will be printed to standard output. 

The options available are:

-d"description" Sets the description field for the audit class name in /var/security/auclass.  The description cannot be longer than 1024 characters (as defined by PATH_MAX in <limits.h>). 

-iclassID Sets the class ID for the audit class name in /var/security/auclass.  Audit class IDs must be unique. 

-a Adds the audit class name to /var/security/auclass. 

-x Deletes the audit class(es) name from /var/security/auclass. 

-q Sets the class ID and/or description quietly. 

If a new audit class is being added to /var/security/auclass, the class ID must be specified; the description is optional.  Audit class names must be uniquely defined and cannot be longer than 45 characters (as defined by MAX_ALIAS_LEN in <sys/audit.h>). 

User definable class IDs fall in the range from 300 to 355 (as defined by MIN_USER_CLASS and MAX_USER_CLASS in <sys/audit.h>). 

Class IDs from 0 to 199 are statically defined by the system and cannot be removed or modified. 

FILES

/var/security/auclass Contains the valid audit classes

SEE ALSO

getacent(3A), auclass(4), audit(4)

NOTES

Though the descriptions of audit classes distributed with the system may be modified, their audit class IDs must not be changed.  The ability to change audit class IDs is intended for use only with new (locally created) audit classes. 

(Security Enhancement)