Previous Topic: Audit CodesNext Topic: When the AUDT Minidisk is Full


AUDITEXT Command Audit Codes

Audit Code

Description

10

Changed a user ID’s logon password (userid )

20

Changed a user ID’s logon storage size (userid, oldsize, newsize )

30

Changed a user ID’s minidisk link mode and passwords. The existing mode is used if no mode change occurs. Otherwise, the new mode is recorded (userid, vaddr, mode )

40

Changed a user ID’s virtual machine options (userid )

50

Changed a user ID’s logical line editing symbols (userid )

60

Changed a user ID’s screen color and highlighting (userid )

70

Defined a user ID’s link to another user ID’s minidisk

(userid, target userid, target owner’s vaddr, link as vaddr )

80

Removed a user ID’s link by another user ID

(target userid, target vaddr, userid )

90

Changed a user ID’s account number

(userid, oldacct, newacct, { TEMP | NEXTLOG | IMMED } )

100

Changed a userid’s distribution code (userid, olddist, newdist )

110

Deleted a user ID’s link to another user ID’s minidisk

( userid, target userid, target vaddr )

120

Defined a new user ID (userid, skeleton name, account )

125

Defined a new user ID with the EDIT command (userid, account )

130

Defined a new minidisk for a user ID (userid, vaddr )

140

Scratched a user ID’s minidisk ( userid, vaddr )

150

Removed a user ID (userid, account, number of minidisks )

160

Placed a user ID on hold (userid, account, number of minidisks )

170

Changed the size of a user ID’s minidisk (userid, vaddr )

180

Changed the device type of a user ID’s minidisk (userid, vaddr )

190

Changed the location of a user ID’s minidisk (userid, vaddr )

200

Edited a user ID’s directory comments (userid )

210

Edited a user ID’s directory entry file (userid )

230

Edited the VMDIRECT MANAGERS file

240

Edited a skeleton file

(skeleton name, filename, { CREATE | REMOVE | UPDATE } )

250

Extracted directory information (filename, filetype, filemode )

260

Backed up the directory using VMXBKP01, optionally to tape, (filename, filetype, filemode )

270

Backed up the directory minidisk (vaddr )

280

Backed up the directory files (filemode )

310

Changed a virtual machine’s user ID (userid, new userid )

320

Expired a virtual machine’s password (userid )

330

Updated a command macro (macro filename )

340

Changed a user ID’s logon and link passwords (userid )

345

Changed a user ID’s logon password (userid )

350

Transferred a minidisk’s ownership

(userid, oldvaddr, newuser, newvaddr )

360

Assigned a user ID to a different directory manager

(userid, newuser, newacct )

370

Changed the IPL statement or its parameters

(userid, sysname, parm1, parm2 )

380

Reactivated a user ID on hold (userid )

390

Scanned minidisks owned by a directory manager’s users

(userid, vaddr )

400

Changed a user ID’s logon password to NOLOG (userid )

410

Reset a user ID’s password journaling (journal data )

420

Directory manager reviewed a user ID (userid )

430

Issued TRACE command ( { MACRO | STOP }, macro name )

440

Started system

450

Shut down system

460

Extracted the audit file (filename, filetype, filemode )

470

Invalid password count exceeded (journal data )

660

System administrator compressed minidisk space

(targetid, vaddr, extent start address, volser )

670

Changed name of DASD volume

(userid, oldvol, newvol, number of minidisks )

680

Moved a minidisk (targetid, vaddr )

710

Obtained servant user ID (servantid )

720

Changed address of virtual device ( userid, oldvaddr, newvaddr)

730

Changed target user ID of directory link

(userid, vaddr, oldtuserid, newtuserid )

740

Changed target virtual address of directory link

(userid, vaddr, oldtvaddr, newtvaddr )

750

Edited a directory profile

(profile name, { CREATE | REMOVE | UPDATE } )

760

Updated a user ID due to profile update (userid, profile name )

770

Added a profile to a user ID’s directory entry (profile name, userid )

780

Deleted a profile from a user ID’s directory entry (profile name, userid )

790

Changed a profile in a user ID’s directory entry

(userid, old profile name, new profile name )

800

Changed a user ID’s machine architecture (userid, oldarch, newarch )

810

Copied a directory entry or profile to issuing user ID’s A‑disk or reader

( { USER | PROFILE }, entry name, { A‑DISK | RDR },

  { LOCK | NOLOCK } )

820

Replaced a directory entry or profile ({ USER | PROFILE }, entry name )

830

Created a permanent lock (filename, filetype, filemode )

840

Released a permanent lock (filename, filetype, filemode )

850

Moved a minidisk with R/O links (userid, vaddr, systemid, newvaddr )

860

Reclaimed a minidisk previously moved while linked R/O

(systemid, vaddr )

910

Updated a configuration file

({ PRODUCT | SECURITY | AUTHORIZ | DASD })

920

Enrolled a user ID in a file pool (userid, filepoolid, numberblocks )

930

Deleted a user ID from a file pool (userid, filepoolid )

940

Modified a user ID’s allocation in a file pool

(userid, filepoolid, numberblocks )

950

Added a file pool to the SFS configuration (filepoolid )

960

Removed a file pool from the SFS configuration (filepoolid )

970

Added a storage group to a file pool (grpnumber, filepoolid )

980

Removed a storage group from a file pool (grpnumber, filepoolid )

990

Gave a file pool to an SFS manager (filepoolid, manager )

1000

Removed a file pool from an SFS manager (filepoolid, manager )

1010

Gave a storage group to an SFS manager

(grpnumber, filepoolid, manager )

1010

Removed a storage group from an SFS manager

(grpnumber, filepoolid, manager )

1020

Removed a storage group from the list of storage groups for a file pool, from an SFS manager (grpnumber, filepoolid, manager )

1030

Modified CP command class

(target_userid, newclass )

1040

Updated the VMDIRECT POSIX file

1050

Updated the VMDIRECT GLOBALS file

1060

Received time zone change interrupt from CP

(old_timezone_valuenew_timezone_value )

1070

Granted user access to SFS file spaces

( filespace_filepool, filespace_userid, target_userid, { RD | DR | NR | WR | DW | NW } )

where:

  • RD is READ
  • DR is DIRREAD
  • NR is NEWREAD
  • WR is WRITE
  • DW is DIRWRITE
  • NW is NEWWRITE

1080

Revoked user access to SFS file spaces

( filespace_filepool, filespace_userid, target_userid, { KD | KN | KR | NW | RW } )

where:

  • KD is KEEPDIRREAD
  • KN is KEEPNEWREAD
  • KR is KEEPREAD
  • NW is NEWAUTH
  • RW is RWAUTH

1090

Accepted DIAGNOSE X’A0’ subcode X’04’ or DIAGNOSE X’88’ subcode X’08’ (target_userid, {VALIDATE | RULE | PASSWORD | JOURNAL } )

1100

Rejected DIAGNOSE X’A0’ subcode X’04’ or DIAGNOSE X’88’ subcode X’08’ (target_userid, {VALIDATE | RULE | PASSWORD | JOURNAL } )

1110

Accepted DIAGNOSE X’A0’ subcode X’0C’ (target_userid, logonby_userid, { RULE | NORULE | PASSWORD | JOURNAL })

1120

Rejected DIAGNOSE X’A0’ subcode X’0C’ (target_userid, logonby_userid, { RULE | NORULE | PASSWORD | JOURNAL })

1130

Minidisk duplicated

target_user, target_disk, from_user, from_disk

1130

Minidisk duplicated

target_user, target_disk, from_user, from_disk

1140

Accepted COUPLE ( {lanowner | SYSTEM}, {lanname | switchname},{RULE | NORULE})

1150

Rejected COUPLE ( {lanowner | SYSTEM}, {lanname | switchname},{RULE | NORULE})

1160

Accepted RDEVCTRL (device, {RULE | NORULE})

1170

Rejected RDEVCTRL (device, {RULE | NORULE})

1180

Accepted FOR (target_user, {RULE | NORULE})

1190

Rejected FOR (target_user, {RULE | NORULE})

1200

Accepted TRSOURCE ({RULE | NORULE})

1210

Rejected TRSOURCE ({RULE | NORULE})

1220

ENTRY ADD (target_user, type, [value])

1230

ENTRY REPLACE (target_user, type, [value])

1240

ENTRY DELETE (target_user, type, [value])

1250

Accepted PASSCHNG (target_user,

{RULE | NORULE | PASSWORD | JOURNAL})

1260

Rejected PASSCHNG (target_user,

{RULE | NORULE | PASSWORD | JOURNAL})

1270

TAG ( {DEFINE | MODIFY | REVOKE | QUERY | SET | SHOW | DELETE}, tag_name, [target_user])