File Access audit alarm

[Paul Whapshott]

Ignore previous message. I forgot to put READ on the ACL.

Apologies.

Once again thanks. I will assign points shortly.

Regards,

Paul

[John Gillings]

Paul,

>I have however noticed that the following >is set on the server;
>System security audits currently enabled for:
>FILE access:
>Failure: read,write,execute,delete,control

"FILE access: Failure" is a general audit of file access failures (duh!). Any file, any access failure. It's independent of any audit ACEs placed on individual files.

To enable audit and/or alarm ACEs use:

$ SET AUDIT/AUDIT/ENABLE=ACL
$ SET AUDIT/ALARM/ENABLE=ACL