| nov93.tar |
Figure 10: Sample audit records
These sample audit records come from the dac.denials report which identifies those events composing the Discretionary Access Control failures. Process ID: 2002 (*INC*) Date/Time: Sat Sep 4 09:39:00 1993 Luid: uucp Euid: uucp Ruid: uucp Egid: uucp Rgid: uucp Supp groups: uucp Event type: Access denial System call: Open Mode: Read Object: /tcb/files/subsys/root Result: Failed-EACCES (Access denial) Security policy: discretionary Process ID: 2001 (*INC*) Date/Time: Sat Sep 4 09:39:01 1993 Luid: uucp Euid: uucp Ruid: uucp Egid: uucp Rgid: uucp Supp groups: uucp Event type: Discretionary access change System call: Chmod Modified object: /tmp/croutHFAa00235 Old Values for Uid: 5 Gid: 5 Mode: 100600 New Values for Uid: 5 Gid: 5 Mode: 100644 Result: Successful Process ID: 2086 (*INC*) Date/Time: Sat Sep 4 10:09:03 1993 Luid: uucp Euid: uucp Ruid: uucp Egid: uucp Rgid: uucp Supp groups: uucp Event type: Discretionary access change System call: Chown Modified object: /usr/spool/uucp/LTMP.2086 Old Values for Uid: 5 Gid: 5 Mode: 100444 New Values for Uid: 5 Gid: 5 Mode: 100444 Result: Successful
|