*nix Documentation Project
·  Home
 +   man pages
·  Linux HOWTOs
·  FreeBSD Tips
·  *niX Forums

  man pages->HP-UX 11i man pages -> event_class (5)              


 event_class(5)           Open Software Foundation            event_class(5)

 NAME    [Toc]    [Back]
      event class file - The file that contains the declaration of an event

 DESCRIPTION    [Toc]    [Back]
      Audit events can be logically grouped into event classes.  Event
      classes are defined in event class files.  An event class file
      contains an event class number and a list of event numbers
      corresponding to audit events.

      All event class files must be created in the dcelocal/etc/audit/ec

      The name of the event class file becomes the name of the event class.
      The recommended naming convention for event class files is:


      where class is a descriptive text that characterizes the event class.

      Event class files must be write-protected by the local operating
      system (that is, only administrators should have write access to these
      files). Audit clients read these files to maintain an event table in
      their address space.

      Optionally, an event class file can contain a SEP line.  This line
      contains a list of prefixes of the event numbers in the file. The SEP
      line speeds up the scanning performed by the Audit clients. Audit
      clients which do not have events with one of the prefixes listed will
      not scan the event list.  If the SEP line is not provided in the file,
      Audit clients will have to read the entire file to find out if the
      event class file contains any of their events.

      Empty lines are ignored in the event class file.

      Comments are designated by the number sign (#) placed before the
      comment text.

    The Event Class File Format    [Toc]    [Back]
      The format of an event class file is:


      SEP=prefix_1 prefix_2 ...

      # comments start with the number sign



 Hewlett-Packard Company            - 1 OSF DCE 1.1/HP DCE 1.8 PHSS_26394-96

 event_class(5)           Open Software Foundation            event_class(5)

 EXAMPLES    [Toc]    [Back]
      Following is an example of an event class file for the event class

      ECN = 0x00000001
      SEP = 0x100
      # AS_Request
      # TGS_TicketReq
      # TGS_RenewReq
      # TGS_ValidateReq

 Hewlett-Packard Company            - 2 -OSF DCE 1.1/HP DCE 1.8 PHSS_26394-96
[ Back ]
 Similar pages
Name OS Title
MULTI_DRIVER_MODULE FreeBSD kernel driver declaration macro
DECLARE_MODULE FreeBSD kernel module declaration macro
DRIVER_MODULE FreeBSD kernel driver declaration macro
SYSCALL_MODULE FreeBSD syscall kernel module declaration macro
DEV_MODULE FreeBSD device driver module declaration macro
ttdt_file_event HP-UX use ToolTalk to announce an event about a file
evmtemplate Tru64 Event Manager template file
poll Linux wait for some event on a file descriptor
sms.sme Tru64 SysMan Station event file
evmfilterfile Tru64 Event Manager filter file
Copyright © 2004-2005 DeniX Solutions SRL
newsletter delivery service