NAME

aumask − audit mask definition file

SYNOPSIS

#include <aumask.h>

DESCRIPTION

/var/security/aumask is a text file that describes each user’s audit mask.  It contains the following information for each audit mask:

Name of the user

Audit mask for the user

The two fields in each record are separated by a colon and may not be continued from one line to the next.  Both fields are mandatory.  The audit mask field contains a comma-separated list of audit masks and audit aliases as defined in audit_alias(4). 

The file is provided for use by getament(3) and associated routines. 

Each audit mask is converted by getament into an array of bits specifying which audit events will be audited for the matching user.  The original text version of the audit mask is stored in am_aumaskstr, while the binary form is stored in am_aumask. 

Lines that are blank or begin with a pound character (#) are treated as comments, and are ignored. 

Lines must be no longer than 1024 characters (as defined by BUFSIZ in <stdio.h>). 

The aumask structure is defined in the <aumask.h> header file as follows:

struct aumask
{
char∗am_name;
char∗am_aumaskstr;
aumask_tam_aumask;
}
 typedef uchar aumask_t[AU_MAX_CLASS + 1];

FILES

/var/security/audit_aliases audit aliases file
/var/security/aumaskuser audit mask file

SEE ALSO

aumaskmgmt(1M), a_create_mask(3A), getament(3A), audit_alias(4)

(Security Enhancement)