Previous Topic: EXEC    : P=ppp U=uuu G=ggg (D=ddd I=iii) Pgm:ProgramName [Attached to: ipaddress]Next Topic: EXECsu  : P=ppp U=uuu G=ggg (D=ddd I=iii) Pgm:ProgramName[Attached to: ipaddress]


EXEC sg: P=ppp U=uuu G=ggg (D=ddd I=iii) Pgm:ProgramName[Attached to: ipaddress]

CA ControlMinder received a program execution event from process ppp associated with UID uuu and GID ggg. (A ggg value of ‑1 means CA ControlMinder has not yet registered the GID of that process). In the message text, ddd and iii are the file's device number and inode, respectively. ProgramName is the zero argument used when invoking the program. The specified program is a setgid program; CA ControlMinder determines whether to grant its execution by invoking the database access rule decision mechanism. If the ipaddress to which the process is attached is extractable, CA ControlMinder reports this in the message text.