Fujitsu SPARC Enterprise M3000 Xscf Reference Manual page 172

setaudit(8)
150 SPARC Enterprise Mx000 Servers XSCF Reference Manual • Last Revised September 2008
The following are valid classes:
all
ACS_SYSTEM(1)
ACS_WRITE(2)
ACS_READ(4)
ACS_LOGIN(8)
ACS_AUDIT(16)
ACS_DOMAIN(32)
ACS_USER(64)
ACS_PLATFORM(128)
ACS_MODES(256)
This option may be specified multiple times. Multiple specification are
processed together with an -e options in the order listed. See EXAMPLE 1.
When set to enable or disable, audit record generation for the classes is
turned on or off respectively. This setting overrides the global policy. When set
to default, the policy for the users is set to follow the global policy. Use
showaudit -g to display the global user audit record generation policy.
-e events=enable|disable
Changes the audit record generation policy for the specified audit events.
events is a comma-separated list of audit events. An event may be specified by
its numeric value or its name. The AEV_ prefix may be omitted. For example,
the event for SSH login can be expressed as AEV_LOGIN_SSH, LOGIN_SSH or
0.
See showaudit -e all for a list of valid events.
This option may be specified multiple times. Multiple specification are
processed together with an -c options in the order listed. See EXAMPLE 3.
When set to enable or disable, audit record generation for the events is
turned on or off respectively. This setting overrides the global policy. When set
to default, the policy for the users is set to follow the global policy. Use
showaudit -g to display the global user audit record generation policy.
Denotes all classes.
System-related events
Commands that can modify a state
Commands that read a current state
Login-related events
Audit-related events
Domain management–related events
User management–related events
Platform management–related events
Mode-related events