Figure 10: Sample audit records
These sample audit records come from the dac.denials report which identifies
those events composing the Discretionary Access Control failures.
Process ID: 2002 (*INC*) Date/Time: Sat Sep 4 09:39:00 1993
Luid: uucp Euid: uucp Ruid: uucp Egid: uucp Rgid: uucp
Supp groups: uucp
Event type: Access denial
System call: Open Mode: Read
Object: /tcb/files/subsys/root
Result: Failed-EACCES (Access denial)
Security policy: discretionary
Process ID: 2001 (*INC*) Date/Time: Sat Sep 4 09:39:01 1993
Luid: uucp Euid: uucp Ruid: uucp Egid: uucp Rgid: uucp
Supp groups: uucp
Event type: Discretionary access change
System call: Chmod
Modified object: /tmp/croutHFAa00235
Old Values for Uid: 5 Gid: 5 Mode: 100600
New Values for Uid: 5 Gid: 5 Mode: 100644
Result: Successful
Process ID: 2086 (*INC*) Date/Time: Sat Sep 4 10:09:03 1993
Luid: uucp Euid: uucp Ruid: uucp Egid: uucp Rgid: uucp
Supp groups: uucp
Event type: Discretionary access change
System call: Chown
Modified object: /usr/spool/uucp/LTMP.2086
Old Values for Uid: 5 Gid: 5 Mode: 100444
New Values for Uid: 5 Gid: 5 Mode: 100444
Result: Successful
|