Service Or Application Management Events - Novell XDASV2 - ADMINISTRATION GUIDE V1 Administration Manual

Event Name
Modify Data Item
Attribute
A.4 Service or Application Management Events
This set of events relates to the management of services or applications. For example, the RPM
package manager might throw these events as packages are installed or removed from a Linux
system. Windows 32 Service Control Manager (SCM) events sent to the Windows 32 System Event
Log may be translated into these events as they are imported into OpenXDASv2. This set of events
could also be much more domain-specific, including concepts such as installing, removing, or
configuring installable executable-modules within a single application domain. The key idea is to
ensure that reported events have security significance.
Service or Application Management Event Taxonomy
Table A-4
Event Name
Install Service
Remove Service
Query Service
Configuration
Modify Service
Configuration
Disable Service
24 Novell XDASv2 Administration Guide
Event Corresponding
Identifier eDir Event
0.0.2.3 DSE_DEFINE
_ATTR_DEF
DSE_REMOV
E_ATTR_DEF
DSE_REMOV
E_CLASS_DE
F
DSE_DEFINE
_CLASS_DEF
DSE_MODIFY
_CLASS_DEF
Event Corresponding
Identifier eDir Event
0.0.3.0 DSE_CHANG
E_MODULE_
STATE
0.0.3.1 DSE_CHANG
E_MODULE_
STATE
0.0.3.2
0.0.3.3
0.0.3.4 DSE_CLOSE_
BINDERY
Dexription Use
Modify data item This event is reported whenever a
attributes security-relevant data item or
resource element is modified –
either the value, or an attribute of
the data item
Description Use
Install a service or This event is reported when a
application service or application is installed
Remove a service This event is reported when a
or application service or application is removed.
Query the This event is reported when service
configuration of a or application configuration
service or information is requested.
application
Modify This event is reported when service
configuration of a or application configuration
service or information is modified.
application
Disable a service This event is reported when a
or application service, operation or function is
disabled.