16.12.2012 Views

z/OS V1R9.0 UNIX System Services Command ... - Christian Grothoff

z/OS V1R9.0 UNIX System Services Command ... - Christian Grothoff

z/OS V1R9.0 UNIX System Services Command ... - Christian Grothoff

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

chaudit — Change audit flags for a file<br />

Format<br />

Description<br />

Options<br />

chaudit [–Fdai] attr pathname ...<br />

chaudit changes the audit attributes of the specified files or directories. Audit<br />

attributes determine whether or not accesses to a file are audited by the system<br />

authorization facility (SAF) interface.<br />

Note: chaudit can be used only by the file owner or a superuser for<br />

non-auditor-requested audit attributes. It takes a user with auditor authority to<br />

change the auditor-requested audit attributes.<br />

–F If you specify a directory as a pathname on the command, chaudit<br />

changes the audit characteristics of all files in that directory. Subdirectory<br />

audit characteristics are not changed.<br />

–d If you specify a directory as a pathname on the command, chaudit<br />

changes the audit characteristics of all the subdirectories in that directory.<br />

File audit characteristics are not changed.<br />

–a Auditor-requested audit attributes are to be changed for the files or<br />

directories specified. If –a is not specified, user-requested audit attributes<br />

are changed.<br />

–i Does not issue error messages concerning file access authority, even if<br />

chaudit encounters such errors.<br />

The symbolic form of the attr argument has the form:<br />

[operation]<br />

op auditcondition[op auditcondition ...]<br />

The operation value is any combination of the following:<br />

r Sets the file to audit read attempts.<br />

w Sets the file to audit write attempts.<br />

x Sets the file to audit execute attempts.<br />

The default is rwx.<br />

The op part of a symbolic mode is an operator telling whether chaudit should turn<br />

file auditing on or off. The possible values are:<br />

+ Turns on specified audit conditions.<br />

- Turns off specified audit conditions.<br />

= Turns on the specified audit conditions and turns off all others.<br />

The auditcondition part of a symbolic mode is any combination of the following:<br />

s Audit on successful access if the audit attribute is on.<br />

f Audit on failed access if the audit attribute is on.<br />

chaudit<br />

You can specify multiple symbolic attr values if you separate them with commas.<br />

Chapter 2. Shell command descriptions 117

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!