SECOS V5.6 (en)

&pagelevel(3)&pagelevel

Object POSIX-CHILD-Process

Event	evt	res	SAT information
Event	evt	res	curpid	currgid	curruid	errno	pid	retval
Create new process (fork)	XFK	S	M	M	M	M	M	M
Create new process (fork)	XFK	F	M	M	M	M	O	M
Create new process on rlogin access (rfork)	XRF	S	M	M	M	M	M	M
Create new process on rlogin access (rfork)	XRF	F	M	M	M	M	O	M

Field name	al/fil	exit	Meaning and values of information: SDF data type or keywords
curpid	*	0100	Current process id of the calling process type: integer 0..2³¹-1
currgid	*	0102	Current real POSIX group id of the calling process type: integer 0..2³¹-1
curruid	*	0101	Current real POSIX user id of the calling process type: integer 0..2³¹-1
errno	*	0103	POSIX error number type: integer -2³¹..2³¹-1
pid	*	010F	Process id type: integer 0..2³¹-1
retval	*	0104	POSIX return value type: integer -2³¹..2³¹-1

Object POSIX-FILE-and-Directory

Event

evt

res

SAT information

a
c
c
g
r
p

a
c
c
m
o
d
e

a
c
c
o
t
h

a
c
c
u
s
r

a
t
f
l
a
g

c
l
o
e
x
e
c

c
u
r
p
i
d

c
u
r
r
g
i
d

c
u
r
r
u
i
d

d
i
r
d
e
s
1

d
i
r
d
e
s
2

e
r
r
n
o

f
a
p
p
e
n
d

f
c
r
e
a
t

f
c
t
l
c
m
d

f
i
l
d
e
s

f
i
l
n
a
m
e

Change current directory (chdir)

XCD

S

-

M

-

M

-

F

-

M

-

M

-

Close file (close)

XCL

S

-

M

-

M

-

M

-

F

-

M

-

M

-

M

-

Modify file access rights (chmod)

XCM

S

M

-

M

-

M

-

M

-

F

M

-

M

-

M

-

M

-

Modify a file’s group or owner (chown)

XCO

S

-

M

-

M

-

F

-

M

-

M

-

Create new file (creat)

XCR

S

M

-

M

-

M

-

M

-

M

-

F

M

-

M

-

M

-

M

-

O

-

Create directory via descriptor (mkdirat)

XDA

S

M

-

M

-

M

-

M

-

F

M

-

M

-

M

-

M

-

Duplicate file descriptor (dup)

XDP

S

-

M

-

M

-

M

-

F

-

M

-

M

-

M

-

Control operation for files (fcntl)

XFC

S

-

O

-

O

M

-

M

O

M

-

F

-

O

-

O

M

-

M

O

M

-

Change current directory via descriptor
(fchdir)

XFD

S

-

M

-

M

-

M

-

F

-

M

-

M

-

M

-

Change file access rights via descriptor
(fchmod)

XFM

S

M

-

M

-

M

-

M

-

M

-

F

M

-

M

-

M

-

M

-

M

-

Change a file’s owner or group via
descriptor (fchown)

XFO

S

-

M

-

M

-

F

-

M

-

M

-

M

-

Create a link to a file via descriptor
(linkat)

XLA

S

-

M

-

M

-

F

-

M

-

M

-

Create link to a file (link)

XLN

S

-

M

-

F

-

M

-

M

-

Change a file or link’s owner or group
(lchown)

XLO

S

-

M

-

F

-

M

-

M

-

Event XCD - XLO (part 1)

Event

evt

res

SAT information

f
i
l
p
o
s

f
n
o
c
t
t
y

f
t
r
u
n
c

g
i
d

l
i
n
k
n
a
m

m
a
p
a
d
d
r

m
a
p
l
e
n

m
a
p
p
r
o
t

m
a
p
s
h
a
r

n
e
w
f
d
e
s

n
e
w
p
a
t
h

p
a
t
h
n
a
m

r
e
t
v
a
l

s
d
e
v
r
d
o

s
e
t
s
g
i
d

s
e
t
s
u
i
d

s
y
m
b
d
e
v

u
i
d

Changecurrent directory (chdir)

XCD

S

-

M

-

F

-

O

M

-

Close file (close)

XCL

S

-

O

M

-

F

-

O

M

-

Modify file access rights (chmod)

XCM

S

-

M

-

M

-

F

-

O

M

-

M

-

Modify a file’s group or owner
(chown)

XCO

S

-

M

-

M

-

M

F

-

M

-

O

M

-

M

Create new file (creat)

XCR

S

-

M

-

M

-

F

-

O

M

-

M

-

Create directory via descriptor
(mkdirat)

XDA

S

-

M

-

M

-

F

-

O

M

-

M

-

Duplicate file descriptor (dup)

XDP

S

-

M

-

O

M

-

F

-

O

-

O

M

-

Control operation for files (fcntl)

XFC

S

-

O

-

O

-

O

M

-

F

-

O

-

O

-

O

M

-

Change current directory via
descriptor
(fchdir)

XFD

S

-

O

M

-

F

-

O

M

-

Change file access rights via
descriptor (fchmod)

XFM

S

-

O

M

-

M

-

F

-

O

M

-

M

-

Change a file’s owner or group
via descriptor (fchown)

XFO

S

-

M

-

O

M

-

F

-

M

-

O

M

-

Create a link to a file via descriptor

(linkat)

XLA

S

-

M

-

M

-

F

-

O

-

O

M

-

Create link to a file (link)

XLN

S

-

M

-

M

-

F

-

O

-

O

M

-

Change a file or link’s owner or group (lchown)

XLO

S

-

M

-

M

-

M

F

-

M

-

O

M

-

M

Event XCD - XLO (part 2)

Event

evt

res

SAT information

a
c
c
g
r
p

a
c
c
m
o
d
e

a
c
c
o
t
h

a
c
c
u
s
r

a
t
f
l
a
g

c
l
o
e
x
e
c

c
u
r
p
i
d

c
u
r
r
g
i
d

c
u
r
r
u
i
d

d
i
r
d
e
s
1

d
i
r
d
e
s
2

e
r
r
n
o

f
a
p
p
e
n
d

f
c
r
e
a
t

f
c
t
l
c
m
d

f
i
l
d
e
s

f
i
l
n
a
m
e

Change file access rights via
descriptor (fchmodat)

XMA

S

M

-

M

-

M

-

M

-

F

M

-

M

-

M

-

M

-

Create directory (mkdir)

XMD

S

M

-

M

-

M

-

M

-

F

M

-

M

-

M

-

M

-

Map file in virtual memory (mmap)

XMM

S

-

M

-

M

-

M

-

F

-

M

-

M

-

M

-

Set protection attributes for file
mapping in virtual memory
(mprotect)

XMP

S

-

M

-

M

-

F

-

M

-

M

-

Mount file system (mount)

XMT

S

-

M

-

M

-

M

F

-

M

-

M

-

O

Cancel mapping of file in virtual
memory (munmap)

XMU

S

-

M

-

M

-

F

-

M

-

M

-

Open file via descriptor (openat)

XOA

S

O

M

O

-

M

-

M

-

M

-

F

O

M

O

-

M

-

M

-

O

-

Open file (open)

XOP

S

O

M

O

-

M

-

M

-

M

-

F

O

M

O

-

M

-

M

-

O

-

Rename file via descriptor
(renameat)

XRA

S

-

M

-

F

-

M

-

Remove directory (rmdir)

XRD

S

-

M

-

M

-

F

-

M

-

M

-

Rename file (rename)

XRN

S

-

M

-

M

-

F

-

M

-

M

-

Create symbolic link to a file via
descriptor (symlinkat)

XSA

S

-

M

-

M

-

F

-

M

-

M

-

Create symbolic link to a file
(symlink)

XSL

S

-

M

-

M

-

F

-

M

-

M

-

Delete file or directory via
descriptor (unlinkat)

XUA

S

-

M

-

M

-

M

-

F

-

M

-

M

-

M

-

Set file bit mask for a process
(umask)

XUM

S

M

-

M

-

M

-

M

-

F

M

-

M

-

M

-

M

-

Delete file (remove/unlink)

XUN

S

-

M

-

M

-

F

-

M

-

M

-

Unmount file system (umount)

XUT

S

-

M

-

M

-

F

-

M

-

M

-

Change file group or owner via
descriptor (fchownat)

XWA

S

-

M

-

M

-

M

-

F

-

M

-

M

-

M

-

Event XMA - XWA (part 1)

Event

evt

res

SAT information

f
i
l
p
o
s

f
n
o
c
t
t
y

f
t
r
u
n
c

g
i
d

l
i
n
k
n
a
m

m
a
p
a
d
d
r

m
a
p
l
e
n

m
a
p
p
r
o
t

m
a
p
s
h
a
r

n
e
w
f
d
e
s

n
e
w
p
a
t
h

p
a
t
h
n
a
m

r
e
t
v
a
l

s
d
e
v
r
d
o

s
e
t
s
g
i
d

s
e
t
s
u
i
d

s
y
m
b
d
e
v

u
i
d

Change file access rights via
descriptor (fchmodat)

XMA

S

-

M

-

M

-

F

-

O

M

-

M

-

Create directory (mkdir)

XMD

S

-

M

-

M

-

M

-

F

-

M

-

O

M

-

M

-

Map file in virtual memory (mmap)

XMM

S

M

-

M

-

O

M

-

F

M

-

O

M

-

O

M

-

Set protection attributes for file
mapping in virtual memory
(mprotect)

XMP

S

-

M

-

M

-

F

-

M

-

M

-

Mount file system (mount)

XMT

S

-

M

-

M

-

F

-

O

M

-

O

-

Cancel mapping of file in virtual
memory (munmap)

XMU

S

-

M

-

M

-

F

-

M

-

M

-

Open file via descriptor (openat)

XOA

S

-

M

-

M

-

O

-

F

-

M

-

O

M

-

O

-

Open file (open)

XOP

S

-

M

-

M

-

O

-

F

-

M

-

O

M

-

O

-

Rename file via descriptor
(renameat)

XRA

S

-

M

-

F

-

M

O

M

-

Remove directory (rmdir)

XRD

S

-

M

-

F

-

O

M

-

Rename file (rename)

XRN

S

-

M

-

F

-

M

O

M

-

Create symbolic link to a file via
descriptor (symlinkat)

XSA

S

-

M

-

M

-

F

-

O

-

O

M

-

Create symbolic link to a file
(symlink)

XSL

S

-

M

-

M

-

F

-

O

-

O

M

-

Delete file or directory via
descriptor (unlinkat)

XUA

S

-

M

-

M

-

F

-

O

-

M

-

Set file bit mask for a process
(umask)

XUM

S

-

M

-

M

-

F

-

M

-

M

-

Delete file (remove/unlink)

XUN

S

-

M

-

M

-

F

-

O

-

M

-

Unmount file system (umount)

XUT

S

-

M

-

F

-

O

M

-

Change file group or owner via
descriptor (fchownat)

XWA

S

-

M

-

M

-

M

F

-

M

-

O

M

-

M

Event XMA - XWA (part 2)

Field name	al/fil	exit	Meaning and values of information: SDF data type or keywords
accgrp	*	0127	Access rights for the group keywords: NONE/R/RW/RWX/RX/W/WX/X
accmode	*	0125	Access mode keywords: READ/READ-AND-WRITE/WRITE/SEARCH
accoth	*	0128	Access rights for other users keywords: NONE/R/RW/RWX/RX/W/WX/X
accusr	*	0126	Access rights for the owner keywords: NONE/R/RW/RWX/RX/W/WX/X
atflag	*	0179	Flag for file operations/events keywords: NONE/ AT-SYMLINK-NOFOLLOW (in case of event XMA or XWA) / AT-SYMLINK-FOLLOW (in case of event XLA) / AT-REMOVEDIR (in case of event XUA) / AT-FDCWD (dirdes1 XDA,XLA,XMA,XOA,XRA,XSA,XUA,XWA, dirdes2 XLA, XRA)
cloexec	*	013A	Close file on exec keywords: NO/YES
curpid	*	0100	Current process id of the calling process type: integer 0..2³¹-1
currgid	*	0102	Current real POSIX group id of the calling process type: integer 0..2³¹-1
curruid	*	0101	Current real POSIX user id of the calling process type: integer 0..2³¹-1
dirdes1	*	0177	File descriptor for the first directory type: integer 0..2³¹-1
dirdes2	*	0178	File descriptor for the second directory type: integer 0..2³¹-1
errno	*	0103	POSIX error number type: integer -2³¹..2³¹-1
fappend	*	0136	Append to the end of file keywords: NO/YES
fcreat	*	0137	Create file keywords: NO/YES
fctlcmd	*	012D	File control operation keywords: DUP-FILDES/SET-FILDES-FLAGS/SET-FILMODE-FLAGS
fildes	*	010C	File descriptor type: integer 0..2³¹-1
filname	*	0003	File name type: c-string 1..54 (ALARM/FILTER: filename)
filpos	*	011B	Offset in mapped file (in multiple of 512) type: integer 0..2³¹-1
fnoctty	*	0139	No controlling terminal keywords: NO/YES
ftrunc	*	0138	Truncate file length to 0 keywords: NO/YES
gid	*	0114	POSIX group id type: integer 0..2³¹-1
linknam	*	0107	Link name type: c-string 1..1024 with-low (ALARM/FILTER: posix-pathname 1..255)
mapaddr	*	011C	Memory address of the mapping type: x-string 2..8 (ALARM/FILTER: x-string 8..8)
maplen	*	011D	Length of the mapped area type: integer 0..2³¹-1
mapprot	*	0129	Access permission for the mapped pages keywords: NONE/R/RW/RWX/RX/W/WX/X
mapshar	*	012A	Visibility of write accesses to the mapped pages keywords: PRIVATE/SHARED
newfdes	*	010D	New file descriptor type: integer 0..2³¹-1
newpath	*	0106	New name of file resp. directory type: c-string 1..1024 with-low (ALARM/FILTER: posix-pathname 1..255)
pathnam	*	0105	Name of file resp. directory type: c-string 1..1024 with-low (ALARM/FILTER: posix-pathname 1..255)
retval	*	0104	POSIX return value type: integer -2³¹..2³¹-1
sdevrdo	*	013D	Symbolic device is read only keywords: NO/YES
setsgid	*	013C	Set the set-group-id bit keywords: NO/YES
setsuid	*	013B	Set the set-user-id bit keywords: NO/YES
symbdev	*	010A	Symbolic device name (/dev/disk/nnnn) type: c-string 1..14 with-low (ALARM/FILTER: posix-pathname 1..14)
uid	*	0111	POSIX user id type: integer 0..2³¹-1

Object POSIX-PROCESS

Event

evt

res

SA iInformation

c
u
r
l
i
m

c
u
r
l
i
m
2

c
u
r
p
i
d

c
u
r
r
g
i
d

c
u
r
r
u
i
d

e
g
i
d

e
r
r
n
o

e
u
i
d

g
i
d

m
a
x
l
i
m

m
a
x
l
i
m
2

Set effective group number of a process (setegid)

XEG

S/F

-

M

-

Set effective user number of a process (seteuid)

XEU

S/F

-

M

-

M

-

Execute file (exec)

XEX

S

-

M

-

M

-

F

-

M

-

M

-

Set maximum number of group memberships for a process
(setgroups)

XGR

S/F

-

M

-

M

-

Send signal to process or process group (kill)

XKL

S/F

-

M

-

M

-

Set process limits (ulimit)

XLM

S/F

M

-

M

-

M

-

Set the real and effective group number of a process (setregid)

XRG

S/F

-

M

-

Set the real and effective user number of a process (setreuid)

XRU

S/F

-

M

-

M

-

Set the group number of a process (setgid)

XSG

S/F

-

M

-

M

-

M

-

Set the process group number (setpgrp)

XSP

S/F

-

M

-

M

-

Set the limit value for a resource (setrlimit)¹

XSR¹

S/F

O

M

-

M

-

O

Set the user number of a process (setuid)

XSU

S/F

-

M

-

M

-

Object POSIX-PROCESS (part 1)

Event

evt

res

SA iInformation

p
a
t
h
n
a
m

p
g
i
d

p
i
d

p
i
d
r
e
c
v

r
e
s
o
u
r
c

r
e
t
v
a
l

r
g
i
d

r
u
i
d

s
e
t
p
c
m
d

s
i
g
n
a
l

u
i
d

u
l
i
m
c
m
d

Set effective group number of a process (setegid)

XEG

S/F

-

M

-

Set effective user number of a process (seteuid)

XEU

S/F

-

M

-

Execute file (exec)

XEX

S

M

-

M

-

F

O

-

M

-

Set maximum number of group memberships for a process
(setgroups)

XGR

S/F

-

M

-

Send signal to process or process group (kill)

XKL

S/F

-

M

-

M

-

M

-

Set process limits (ulimit)

XLM

S/F

-

M

-

M

Set the real and effective group number of a process (setregid)

XRG

S/F

-

M

-

Set the real and effective user number of a process (setreuid)

XRU

S/F

-

M

-

Set the group number of a process (setgid)

XSG

S/F

-

M

-

Set the process group number (setpgrp)

XSP

S/F

-

O

-

M

-

M

-

Set the limit value for a resource (setrlimit)¹

XSR¹

S/F

-

M

-

Set the user number of a process (setuid)

XSU

S/F

-

M

-

M

-

¹The curlim and curlim2 fields as well as the maxlim and maxlimt2 fields are mutually exclusive.
If the resource field has the value CPU-TIME or NO-OF-FILES, the curlim and maxlim2 are logged; if resource=FILE-SIZE, the curlim2 and maxlim2 fields are logged.

Object POSIX-PROCESS (part 2)

Field name	al/fil	exit	Meaning and values of information: SDF data type or keywords
curlim	*	0117	Current limit type: integer 0..2³¹-1
curlim2	*	0141	Current limit (in multiple of 512) type: integer 0..2³¹-1
curpid	*	0100	Current process id of the calling process type: integer 0..2³¹-1
currgid	*	0102	Current real POSIX group id of the calling process type: integer 0..2³¹-1
curruid	*	0101	Current real POSIX user id of the calling process type: integer 0..2³¹-1
egid	*	0116	Effective POSIX group id type: integer 0..2³¹-1
errno	*	0103	POSIX error number type: integer -2³¹..2³¹-1
euid	*	0113	Effective POSIX user id type: integer 0..2³¹-1
gid	*	0114	POSIX group id type: integer 0..2³¹-1
maxlim	*	0118	Maximum limit type: integer 0..2³¹-1
maxlim2	*	0142	Maximum limit (in multiple of 512) type: integer 0..2³¹-1
pathnam	*	0105	Name of file resp. directory type: c-string 1..1024 with-low (ALARM/FILTER: posix-pathname 1..255)
pgid	*	0110	Process group id type: integer 0..2³¹-1
pid	*	010F	Process id type: integer 0..2³¹-1
pidrecv	*	010E	Process id of receiving process type: integer -2³¹..2³¹-1
resourc	*	012C	Resource keywords: CPU-TIME/FILE-SIZE/NO-OF-FILES
retval	*	0104	POSIX return value type: integer -2³¹..2³¹-1
rgid	*	0115	Real POSIX group id type: integer 0..2³¹-1
ruid	*	0112	Real POSIX user id type: integer 0..2³¹-1
setpcmd	*	012E	Suboperation for event XSP (set process group id) keywords: SET-PGID/SET-SID/ SET-SID-AND-PGID
signal	*	012B	Signal sent to a process keywords: ABORT/KILL
uid	*	0111	POSIX user id type: integer 0..2³¹-1
ulimcmd	*	012F	Suboperation for event XLM (set process limits) keywords: SET-FILE-LIMIT

Object POSIX-SYSTEM-Resources

Event

evt

res

SAT information

a
c
c
g
r
p

a
c
c
o
t
h

a
c
c
o
u
n
t

a
c
c
u
s
r

c
u
r
p
i
d

c
u
r
r
g
i
d

c
u
r
r
u
i
d

d
l
t
s
e
c

d
l
t
u
s
e
c

e
r
r
n
o

g
i
d

h
o
m
e
d
i
r

n
s
e
m
s

o
b
j
-
u
i
d

p
r
o
c
n
a
m

p
w
c
m
d

Changesystem time (adjtime)

XAJ

S/F

-

M

-

Set user attributes (pwent)

XPW

S/F

-

O

-

M

-

M

O

-

M

O

M

Semaphore control operation (semsys)

XSE

S

O

-

O

M

-

M

O

-

O

-

F

O

-

O

M

-

M

O

-

O

-

Shared memory control operations (shmsys)

XSH

S/F

O

-

O

M

-

M

O

-

Object POSIX-SYSTEM-RESOURCES (part 1)

Event

evt

res

SAT information

r
e
t
v
a
l

s
e
m
a
c
t

s
e
m
c
m
d

s
e
m
i
d

s
e
m
n
u
m

s
e
t
s
g
i
d

s
e
t
s
u
i
d

s
h
e
l
l

s
h
m
a
c
t

s
h
m
a
d
d
r

s
h
m
c
m
d

s
h
m
i
d

s
h
m
r
d
o

s
h
m
s
i
z
e

u
i
d

u
s
e
r
k
e
y

Change systemtime (adjtime)

XAJ

S/F

M

-

Set user attributes (pwent)

XPW

S/F

M

-

O

-

O

-

Semaphore control operation (semsys)

XSE

S

M

O

M

O

-

O

F

M

O

M

O

-

O

Shared memory control operations (shmsys)

XSH

S/F

M

-

O

-

O

M

O

Object POSIX-SYSTEM-RESOURCES (part 2)

Field name	al/fil	exit	Meaning and values of information: SDF data type or keywords
accgrp	*	0127	Access rights for the group keywords: NONE/R/RW/RWX/RX/W/WX/X
accoth	*	0128	Access rights for other users keywords: NONE/R/RW/RWX/RX/W/WX/X
account	*	010B	Account number type: c-string 1..8
accusr	*	0126	Access rights for the owner keywords: NONE/R/RW/RWX/RX/W/WX/X
curpid	*	0100	Current process id of the calling process type: integer 0..2³¹-1
currgid	*	0102	Current real POSIX group id of the calling process type: integer 0..2³¹-1
curruid	*	0101	Current real POSIX user id of the calling process type: integer 0..2³¹-1
dltsec	*	0119	Delta seconds for adjusting the system time type: integer 0..2³¹-1
dltusec	*	011A	Delta microseconds for adjusting the system time type: integer 0..2³¹-1
errno	*	0103	POSIX error number type: integer -2³¹..2³¹-1
gid	*	0114	POSIX group id type: integer 0..2³¹-1
homedir	*	0108	Home directory of a user type: c-string 1..1024 with-low (ALARM/FILTER: posix-pathname 1..255)
nsems	*	0123	Total number of all semaphores type: integer 0..2³¹-1
obj-uid	*	0011	User identification as object type: c-string 1..8
procnam	*	0019	Processor name type: c-string 1..8 (ALARM/FILTER: c-string 8..8)
pwcmd	*	0130	Suboperation for event XPW (set user attributes) keywords: FORK-WITH-USER-CHANGE/ MOD-POSIX-USER-ATTR/ POSIX-RLOGIN-ACCESS
retval	*	0104	POSIX return value type: integer -2³¹..2³¹-1
semact	*	0133	Action code for semaphore control operation keywords: REMOVE-ID/SET-OPTIONS
semcmd	*	0131	Semaphore control operation keywords: CONTROL/GET
semid	*	0121	Id of the semaphore type: integer 0..2³¹-1
semnum	*	0122	Number of a specific semaphore type: integer 0..2³¹-1
setsgid	*	013C	Set the set-group-id bit keywords: NO/YES
setsuid	*	013B	Set the set-user-id bit keywords: NO/YES
shell	*	0109	Shell of a user type: c-string 1..1024 with-low (ALARM/FILTER: posix-pathname 1..255)
shmact	*	0134	Action code for shared memory control operation keywords: REMOVE-ID/SET-OPTIONS
shmaddr	*	011E	Address of the shared memory type: x-string 2..8 (ALARM/FILTER: x-string 8..8)
shmcmd	*	0132	Shared memory control operation keywords: ATTACH/CONTROL/DETACH/GET
shmid	*	0120	Id of the shared memory type: integer 0..2³¹-1
shmrdo	*	013E	Shared memory is read only keywords: NO/YES
shmsize	*	011F	Size of the shared memory type: integer 0..2³¹-1
uid	*	0111	POSIX user id type: integer 0..2³¹-1
userkey	*	0143	User-selected numerical key type : integer -2³¹..2³¹-1

Object PRIVILEGE

Event	evt	SAT information
Event	evt	priv	obj-uid	catid	privset
Grant	PST	O	M	M	O
Withdraw	PRT	O	M	M	O
Create privilege set	PSC	O	-	M	M
Delete privilege set	PSD	-	-	M	M
Add privilege to privilege set	PSA	M	-	M	M
Remove privilege from privilege set	PSR	M	-	M	M

Field name	al/fil	exit	Meaning and values of information: SDF data type or keywords
catid	*	0022	Catalog identificator type: c-string 1..4
obj-uid	*	0011	User identificator as object type: c-string 1..8
priv	*	002D	Processed privilege identification keywords: see “Table of privileges” in the „SECOS - Security Control System - Access Control“ manual [1].
privset	*	00A3	privilege set name type: c-string 1..8

Object PROGRAM

Event

evt

res

SAT information

c
x
t
n
a
m
e

f
i
l
n
a
m
e

e
l
t
n
a
m
e

e
l
t
v
e
r
s

e
l
t
t
y
p
e

i
n
t
n
a
m
e

i
n
t
v
e
r
s

i
n
t
d
a
t
e

l
o
a
d
u
n
i

m
e
m
c
l
a
s

l
d
v
e
r
s

m
e
m
p
o
o
l

s
c
o
p
e

Load phase from PAM file

XLD

S

M

M¹

-

M

-

O

Load phase from library

XLD

S

M

M²

M

O

Load phase

XLD

F

O

M

O

M

O

Load module LLM from lib

XLD

S

M

M²

M

O

Load module OM from EAM

XLD

S

M

M³

M⁴

-

M

-

M

-

O

Load module OM from lib

XLD

S

M

M²

M

-

M

O

Load module

XLD

F

O

M²

O

M

-

O

Unload

XUL

S

M

-

O

-

O

-

O

F

M

-

O

-

O

-

O

LLM = link and load moduleOM = object module

¹Name of the phase

²Name of the library file

³The output field contains an asterisk (*)

⁴The output field contains blanks

Field name	al/fil	exit	Meaning and values of information: SDF data type or keywords
cxtname	*	000F	Context name type: c-string 1..32
eltname	*	0008	Element name type: c-string 1..64
elttype	*	000A	Element type type: c-string 1..8
eltvers	*	0009	Element version type: c-string 1..24
filname	*	0003	File name type: c-string 1..54 (ALARM/FILTER: filename)
intdate	*	000D	Internal date type: c-string 1..8 (ALARM/FILTER: c-string 8..8)
intname	*	000B	Internal name type: c-string 1..41
intvers	*	000C	Internal version type: c-string 1..24
ldvers	*	0099	Load unit version type: c-string 1..24
loaduni	*	000E	Load unit name type: c-string 1..32
memclas	*	0020	memory class of the memory pool keywords: CLASS3/CLASS4/CLASS5/CLASS6
mempool	*	001C	memory pool name type: c-string 1..54
scope	*	001D	Memory pool scope keywords: LOCAL/GROUP/GLOBAL/USER-GROUP/ UNDEFINED/SYSTEM

Object SAT

Event

evt

res

SAT information

b
l
k
s
i
z
e

c
o
n
f
n
a
m

c
p
u
i
d

d
e
v
i
c
e

d
o
d
v
e
r
s

e
v
t
a
u
d

f
i
l
n
a
m
e

l
o
g
q
u
a
n

n
e
w
f
i
l
e

o
b
j
-
e
v
t

o
b
j
-
u
i
d

p
e
r
i
o
d
d

p
e
r
i
o
d
h

p
r
i
a
l
l
o

Command
HOLD-SAT-LOGGING

ZHO

S

-

F

-

Command
RESUME-SAT-LOGGING

ZRE

S

-

M

-

F

-

O

-

Command
MODIFY-SAT-PRESELECTION

ZPS

S

-

O

-

O

-

O

-

F

-

O

-

O

-

O

-

Command
MODIFY-SAT-SUPPORT-PARAMETERS

ZMS

S

-

F

-

Command
CHANGE-SAT-FILE

ZCH

S

M

-

O

-

M

-

O

M

F

O

-

O

-

O

-

O

Command
SAVE-SAT-PARAMETERS

ZSP

S

-

F

-

HEADER record

ZBG

-

M

-

M

-

O

-

M

-

TRAILER record

ZND

-

M

-

O

-

SAT event preselection when selection file open

ZEP

S

-

M

-

M

-

F

-

Object SAT (part 1)

Event

evt

res

SAT information

p
r
e
x
i
t

r
e
a
s
o
n

r
u
l
e

s
a
v
p
a
r

s
a
v
v
a
l

s
e
c
a
l
l
o

s
u
p
p
a
r

s
u
p
v
a
l

s
y
s
i
d

s
y
s
n
a
m

s
y
s
v
e
r
s

u
a
u
d
d
e
f

u
s
e
r
a
u
d

v
s
n
1

Command
HOLD-SAT-LOGGING

ZHO

S

-

F

-

Command
RESUME-SAT-LOGGING

ZRE

S

-

F

-

Command
MODIFY-SAT-PRESELECTION

ZPS

S

O

-

O

-

O

-

F

O

-

O

-

O

-

Command
MODIFY-SAT-SUPPORT-PARAMETERS

ZMS

S

-

O

-

F

-

O

-

Command
CHANGE-SAT-FILE

ZCH

S

-

M

-

O

F

-

O

-

O

Command
SAVE-SAT-PARAMETERS

ZSP

S

-

O

-

F

-

O

-

HEADER record

ZBG

-

M

-

M

-

TRAILER record

ZND

-

M

-

SAT event preselection when selection file open

ZEP

S

-

F

-

Object SAT (part 2)

Field name	al/fil	exit	Meaning and values of information: SDF data type or keywords
blksize	*	00CD	block size type: integer, sensible values 1..32767
confnam		008B	configuration name type: c-string 1..21
cpuid		008D	cpu identification type: x-string 2..128
device	*	003C	Device name type: c-string 1..8
dodvers		009A	dod version type: c-string 1..7
evtaud	*	00CE	event auditability keywords: SUCCESS/FAILURE/ALL/NONE
filname	*	0003	File name type: c-string 1..54 (ALARM/FILTER: filename)
logquan	*	00F9	sign for logging quantity type: c-string 1..8
newfile	*	0007	New file name type: c-string 1..54 (ALARM/FILTER: filename)
obj-evt	*	00C9	event as object type: c-string 1..3
obj-uid	*	0011	User identificator as object type: c-string 1..8
periodd	*	00EA	number of days for action repetition type: integer 0..255
periodh	*	00EB	number of hours for action repetition type: integer 0..255
prexit	*	00D0	Exit routine activated keywords: YES/NO
priallo	*	00CB	primary allocation type: integer -2³¹..2³¹-1
reason	*	008C	reason keywords: RESUME-SAT-LOGGING/ CHANGE-SAT-FILE/DMS- ERROR/ HOLD-SAT-LOGGING/SHUTDOWN/PERIODIC- SWITCHING/STARTUP
rule	*	00CA	rule keywords: FILES-BY-EVENT/ INDEPENDENT/UNCHANGED
savpar	*	00D1	saved parameters keywords: ALARM/FILTER/LOGGING-FILE-ATTRIBUTES/ PRESELECTION/SAT-SUPPORT
savval	*	00D2	saved value keywords: CURRENT/STANDARD
secallo	*	00CC	secondary allocation type: integer -2³¹..2³¹-1
suppar	*	013F	name of SAT support parameter keywords: POSIX-EVENTS
supval	*	0140	value of SAT support parameter keywords: DISABLED / ENABLED
sysid		0088	system-id type: c-string 1..3
sysnam		0089	system-name type: c-string 1..8
sysvers		008A	system version type: c-string 1..4
useraud	*	00CF	user auditability keywords: YES/NO
vsn1	*	0039	volume serial number type: c-string 1..6

Object SAT-ALARM

Event	evt	res	SAT information
Event	evt	res	alm act	alm lim	alm name	alm rep	alm sel	evt aud	obj- fld	obj- evt	obj- uid
Command ADD-SAT-ALARM-CONDITIONS	ZCA	S	-	-	M	-	-	-	-	-	-
Command ADD-SAT-ALARM-CONDITIONS	ZCA	F	-	-	O			-			-
Command REMOVE-SAT-ALARM-CONDITIONS	ZDA	S	-	-	M	-	-	-	-	-	-
Command REMOVE-SAT-ALARM-CONDITIONS	ZDA	F	-	-	O			-			-
Command MODIFY-SAT-ALARM-CONDITIONS	ZMA	S	O	O	M	O	O	O	O	O	O
Command MODIFY-SAT-ALARM-CONDITIONS	ZMA	F	O	O	O	O	O	O	O	O	O
(alarm trigger)¹	ZAL¹	-	M	-	M	-	-	M	-	M	-

¹In addition to the specified fields, all fields of the event that triggered the alarm are also logged.

Field name	al/fil	exit	Meaning and values of information: SDF data type or keywords
almact	*	00D6	alarm action keywords: OPERATOR-MESSAGE/OPERATOR-PAUSE
almlim	*	00D4	alarm time limit (in seconds) type: integer -1..2³¹-1
almname	*	00D3	alarm name type: c-string 1..8
almrep	*	00D5	alarm repeat type: integer 0..255
almsel	*	00D7	alarm selection keywords: ON/OFF
evtaud	*	00CE	event auditability keywords: SUCCESS/FAILURE/ALL/NONE
obj-evt	*	00C9	event as object type: c-string 1..3 (ALARM/FILTER: c-string 3..3)
obj-fld	*	00D8	object field type: c-string 1..7
obj-uid	*	0011	User identificator as object type: c-string 1..8

Object SAT-FILTER

Event	evt	res	SAT information
Event	evt	res	ftract	ftrname	ftrsel
Command ADD-SAT-FILTER-CONDITIONS	ZCF		M	M	-
Command REMOVE-SAT-FILTER-CONDITIONS	ZDF		-	M	-
Command MODIFY-SAT-FILTER-CONDITIONS	ZMF		M	M	O

Field name	al/fil	exit	Meaning and values of information: SDF data type or keywords
ftract	*	00FA	Filter Action Logging on/off keywords: NO-RECORDING/RECORDING
ftrname	*	00FB	Filter Name Type : c-string 1..8
ftrsel	*	00FC	Filter selection keywords: OFF/ON

Object SESAM

Event

evt

res

SAT information

a
p
p
l
n
a
m

a
p
p
l
u
i
d

d
b
h
c
o
n
f

d
b
h
n
a
m

d
b
n
a
m
e

d
b
t
a
b
l
e

h
o
s
t
n
a
m

s
c
h
e
m
a

s
e
s
s
u
b
c

s
e
s
t
e
x
t

s
t
m
t
c
t
f

s
t
m
t
c
t
s

u
t
m
s
c
t

u
t
m
u
s
e
r

Administer DBH session

SEA

S

M

O

M

-

M

-

M

-

M

F

M

O

M

-

M

-

M

-

M

Change access rights and
user accesses

SEP

S

M

O

M

-

M

-

M

O

-

M

F

M

O

M

-

M

-

M

O

-

M

DDL, SSL, utility statement

SES

S

M

O

M

O

M

O

M

O

-

M

F

M

O

M

O

M

O

M

O

-

M

Start/stop SESAM task
(DBH or service task)

SET

S

-

M

-

M

-

F

-

M

-

M

-

Stop process

SEU

S

M

O

M

-

M

-

M

-

M

F

M

O

M

-

M

-

M

-

M

Field name	al/fil	exit	Meaning and values of information: SDF data type or keywords
applnam	*	0025	Application name type: c-string 1..8 In case of a TIAM program the field contains the string 'TSN=<tsn>' where <tsn> stands for the tsn of the application program
appluid	*	0162	Application user id type: c-string 1..8
dbhconf	*	0160	DBH configuration identifier type: c-string 1..1
dbhnam	*	015F	DBH name identifier type: c-string 1..1
dbname	*	0165	Logical database name type: c-string 1..18
dbtable	*	0167	Table name in the catalog type: c-string 1..31
hostnam	*	0029	Name of the host type: c-string 1..8
schema	*	0166	Schema name in the catalog type: c-string 1..31
sessubc	*	015E	Subcode for the SESAM events type: c-string 1..4 The following subcodes can be evaluated, depending on the event concerned: Event SET STRT: Start of a SESAM DBH task END: End of a SESAM DBH task Event SEU END: End of a session Event SEA ADM administration stmt Event SEP USR: Add/remove/modify users PRI: Grant/revoke rights Event SES DDL: DDL stmt SSL: SSL stmt UTI: Utility stmt
sestext	*	0168	Additional information for the SESAM events type: c-string 1..64
stmtctf	*	0164	Number of unsuccessful statements in the session type: integer 0..2³¹-1 A statement is unsuccessful if it is not confirmed with "successful completion", "no data" or "rollback".
stmtcts	*	0163	Number of successful statements in the session type: integer 0..2³¹-1 A statement is successful if it is confirmed with "successful completion", "no data" or "rollback".
utmsct	*	0161	UTM session counter type: x-string 2..16 (ALARM/FILTER: x-string 16..16)
utmuser	*	0048	User id in UTM application frame type: c-string 1..8

Additional information on separate data fields

(see also the “SESAM/SQL Server – Database Operation” manual [33])

The SAT log records for all tasks of a database handler can be identified with the dbhnam and dbhconf fields.
A specific process can be identified with the hostnam, applnam, utmuser and utmsct fields.
Some fields are not filled or only filled in a particular way with logging of an administration command via /SEND-MSG:
Field name
Contents
hostnam
’SESAM’
applnam
’SEND’
utmuser
’MESSAGE’
appluid
not filled

Object SMS

Event	evt	SAT information
Event	evt	catid	newvset	storcla	volset	vslist
Create storage class	SCC	M	-	M	-	-
Modify characteristics of storage class	SCM	M	-	M	-	-
Delete storage class	SCD	M	-	M	-	-
Bind storage class to volume set list	SCB	M	-	M	-	M
PVSREN: delete all storage classes	SCP	M	-	M	-	-
Unbind storage class from volume set list	SCU	M	-	M	-	M
Command CHANGE-STORAGE-CLASS-CATALOG	SCX	M	-	-	-	-
Create volume set list	VLC	M	-	-	-	M
Modify volume set list	VLM	M	-	-	-	M
Delete volume set list	VLD	M	-	-	-	M
Add volume to volume set list	VLA	M	-	-	M	M
Remove volume from volume set list	VLR	M	-	-	M	M
Command CHANGE-VOLUME-SET-LIST-CATALOG	VLX	M	-	-	-	-
PVSREN: rename volume set	VP1	M	M	-	M	M
PVSREN: rename all volume sets	VP2	M	-	-	-	M
PVSREN: delete all volume sets	VP3	M	-	-	-	M

Field name	al/fil	exit	Meaning and values of information: SDF data type or keywords
catid	*	0022	Catalog identificator type: c-string 1..4
newvset	*	00D9	New volume set name type: c-string 1..4
storcla	*	00ED	storage class type: c-string 1..8
volset	*	00EF	volume set type: c-string 1..4
vslist	*	00EE	volume set list type: c-string 1..8

Object SPOOL DEVICE

Event	evt	SAT information
Event	evt	device	admin	station	procnam
Define RSO device	SDA	M	O	O	O
Modify attributes	SDM	M	O	O	O
Delete entry	SDR	M	-	-	-

Field name	al/fil	exit	Meaning and values of information: SDF data type or keywords
admin	*	002B	(Group)administrator identification type: c-string 1..8 (user-id)
device	*	003C	Device name type: c-string 1..8
procnam	*	0019	Processor name type: c-string 1..8 (ALARM/FILTER: c-string 8..8)
station	*	0018	Terminal name type: c-string 1..8 (ALARM/FILTER: c-string 8..8)

Object SPOOL JOBS

Event

evt

res

SAT information

d
e
s
t
s
u
p

d
e
v
i
c
e

d
m
s
r
c

e
l
t
n
a
m
e

e
l
t
t
y
p
e

e
l
t
v
e
r
s

e
r
a
s
e

f
i
l
n
a
m
e¹

f
n
p
a
t
r
n¹

j
o
b
c
m
d

j
o
b
c
o
p
y

j
o
b
e
r
r
t

j
o
b
o
r
i
g

j
o
b
p
a
g
e

j
o
b
t
e
r
m

p
l
a
m
r
c

t
s
n
-
i
n
f

Request printing

JPR

S

-

O

M

-

M

F

-

O

M

O

-

Delete job

JPC

S

-

M

F

-

M

Printing finished

JPE

S

M

O

M

-

M

O

M

O

M

-

M

F

M

O

M

-

M

O

M

O

M

O

M

Interrupt job

JPI

S

M

O

M

-

M

O

M

O

M

-

M

F

M

O

M

-

M

O

M

O

M

O

M

¹mutually exclusive

Field name	al/fil	exit	Meaning and values of information: SDF data type or keywords
destsup	*	00A4	destination (output support) keywords: LOCAL/REMOTE/TAPE
device	*	003C	Device name type: c-string 1..8
dmsrc	*	0004	DMS return code type: x-string 2..4 (ALARM/FILTER: x-string 4..4)
eltname	*	0008	Element name type: c-string 1..64
elttype	*	000A	Element type type: c-string 1..8
eltvers	*	0009	Element version type: c-string 1..24
erase	*	0041	File deletion status keywords: YES/NO
filname	*	0003	File name type: c-string 1..54 (ALARM/FILTER: filename)
fnpatrn	*	0063	filename pattern type: c-string 1..80
jobcmd	*	00A7	job command origin keywords: PRINT
jobcopy	*	00A8	copies number type: integer 0..255
joberrt	*	00AA	detected errors during spoolout keywords: DEVICERR/DMS/ NONE/PLAM/SYSTEM/USER
joborig	*	00A6	job origin keywords: NORMAL/RTCOPY/RTDIRECT
jobpage	*	00A9	printed pages number type: integer : 0..2³¹-1
jobterm	*	00A5	Termination or interruption type keywords: ABORT/CANCEL/KEEP NORMAL/RESPOOL/SUSPEND
plamrc	*	0046	PLAM return code type: c-string 1..13 (ALARM/FILTER: x-string 16..16). Format: zzzz/xxxxxxxx zzzz = primary code (decimal) xxxxxxxx= Secondary code (hexadecimal) Information about the corresponding return code can be obtained with /HELP PLAzzzz
tsn-inf	*	0010	TSN object type: c-string 1..4 (ALARM/FILTER: c-string 4..4)

Object SUBSYSTEM

Event

evt

res

SAT information

c
a
t

c
x
t
n
a
m
e

l
i
b
n
a
m
e

r
e
p
f
i
l
e

s
u
b
s
n
a
m

s
u
b
s
v
e
r

s
y
n
f
i
l
e

i
n
f
f
i
l
e

m
s
g
f
i
l
e

o
b
j
-
u
i
d

s
s
c
m
d

s
s
h
o
l
d

Activate

SCR

S/F

-

M

-

M

-

Deactivate

S

-

M

-

F

-

Hold

SHD

S/F

-

M

-

Resume

SRS

S/F

-

M

-

Connection to nonprivileged subsystem

SCN

S

-

M

-

F

-

Disconnection from nonprivileged subsystem

SDS

S

-

M

-

F

-

Catalog management

SCT

S/F

M

-

Partially load subsystem file

SLP

S/F

-

O

-

M

-

Change subsystem file

SFC

S/F

-

O

M

O

Remove subsystem

SRM

S/F

-

M

-

Field name	al/fil	exit	Meaning and values of information: SDF data type or keywords
cat	*	0032	New catalog name type: c-string 1..54 (ALARM/FILTER: filename)
cxtname	*	000F	Context name type: c-string 1..32
inffile	*	00E5	information file type: c-string 1..54 (ALARM/FILTER: filename)
libname	*	00A0	object module library type: c-string 1..54 (ALARM/FILTER: filename)
msgfile	*	00E4	message file type: c-string 1..54 (ALARM/FILTER: filename)
obj-uid	*	0011	user identificator as object type: c-string 1..8
repfile	*	00A1	rep file name type: c-string 1..54 (ALARM/FILTER: filename)
sscmd	*	00E7	DSSM commands permission Keyword: ALLOWED/BY-ADMINISTRATOR/FORBIDDEN
sshold	*	00E6	Indicates if subsystem can be deleted / held Keyword: ALLOWED/FORBIDDEN
subsnam	*	0030	name of the subsystem type: c-string 1..8
subsver	*	0031	version of the subsystem type: c-string 1..7
synfile	*	00A2	syntax file name type: c-string 1..54 (ALARM/FILTER: filename)

Object SYNTAX FILE

Event	evt	res	SAT information
Event	evt	res	filname	syntype	sdfcmd
Activate	YAC	S/F	M	M	-
Modify	YMD	S/F	M	M	-
Open hierarchy (macro OPNCALL)	YON	S/F	M	M	-
Activate for subsystem	YAD	S/F	M	M	-
Check	YCK	S	-	-	-
Check	YCK	F	M	M	M

Field name	al/fil	exit	Meaning and values of information: SDF data type or keywords
filname	*	0003	File name type: c-string 1..54 (ALARM/FILTER: filename)
sdfcmd	*	00AC	SDF command name type: c-string 1..30
syntype	*	002E	Syntax file type keywords:SYSTEM/GROUP/SUBSYSTEM/USER

Object TAPE encryption

Event

evt

SAT information

a
c
c
t
o
k
b

d
p
t
h
i
n
f

d
p
t
h
o
s
t

h
o
s
t
n
a
m

k
e
y
b
o
x

k
e
y
i
d

s
r
c
h
o
s
t

s
r
c
t
s
n

s
r
c
u
s
e
r

t
g
t
h
o
s
t

t
g
t
k
b
o
x

t
r
f
k
b
o
x

v
o
l
k
i
n
d

v
s
n
1

TAPE encryption

CREATE-ENCRYPTION-KEY
statement

TKC

-

M

O

-

ADD-ENCRYPTION-KEY
statement

TKA

-

M

-

O

-

COPY-ENCRYPTION-KEYS
statement

TKP

-

M

-

M

-

REMOVE-ENCRYPTION-KEY
statement

TKR

-

M

-

SHOW-ENCRYPTION-KEYS
statement

TKS

-

M

-

SET-WRITE-ENCRYPTION-
KEY statement

TWK

-

M

-

DELETE-KEY-BOX
statement

TBD

-

M

-

EXPORT-KEY-BOX
statement

TBE

-

M

O

M

-

M

-

IMPORT-KEY-BOX
statement

TBI

-

M

-

M

-

REPAIR-KEY-BOX
statement

TBR

-

M

-

MODIFY-VOLUME-
ENCRYPTION-ATTR statement

TVM

-

M

-

O

M

SHOW-VOLUME-
ENCRYPTION-ATTR statement

TVS

-

M

Access to key box

TBA

M

-

M

-

M

-

Field name	al/fil	exit	Meaning and values of information: SDF data type or keywords
acctokb	*	0070	access mode to the key box keywords: OPEN-READ / OPEN-WRITE / DELETE / REPAIR
dpthinf	*	006B	Information about the depot host keywords: IMPORT-PROCESS-HOST/OWN
dpthost	*	006D	name of the host where the transfer key box is deposited type: c-string 1..8
hostnam	*	0029	Name of the host type: c-string 1..8
keybox	*	0066	Key box name type: c-string 1..54
keyid	*	0067	Identification string for the encryption key type: c-string 1..18 (ALARM/FILTER: c-string 18..18)
srchost	*	006F	Host from which the key box is accessed type: c-string 1..8
srctsn	*	0071	TSN of the accessing subject type: c-string 1..4
srcuser	*	0072	Userid of the accessing subject type: c-string 1..8
tgthost	*	0068	Name of target host type: c-string 1..8
tgtkbox	*	0069	Name of target key box type: c-string 1..54
trfkbox	*	006A	Name of transfer key box type: c-string 1..54
volkind	*	006E	Kind of volumes for which the key can be used resp. for which the encryption attributes are modified keywords: FROM-FOREIGN-MAREN-DOMAIN
vsn1	*	0039	volume serial number type: c-string 1..6

Object TERMINAL SET

Event	evt	SAT information
Event	evt	catid	nwtsnam	nwtsown	nwtsscp	partsb	partsm	tsname	tsowner	tsscope
Generate	TSB	M	-	-	-	E	-	M	M	M
Copy	TSC	M	M	M	M	-	-	M	M	M
Delete	TSD	M	-	-	-	-	-	M	M	M
Modify	TSM	M	-	-	-	-	E	M	M	M

Field name	al/fil	exit	Meaning and values of information: SDF data type or keywords
catid	*	0022	Catalog identificator type: c-string 1..4
nwtsnam	*	00C6	Name of new terminal set type: c-string 1..8
nwtsown	*	00C8	Owner of new terminal set type: c-string 1..8
nwtsscp	*	00C7	Scope of new terminal set keyword: GROUP / SYSTEM / USER
partsb	+	0217	Parameter list for build terminal set type: x-string 2..200
partsm	+	0218	Parameter list for modify terminal set type: x-string 2..6800
tsname	*	00C3	Terminal set name type: c-string 1..8
tsowner	*	00C5	Terminal set owner type: c-string 1..8
tsscope	*	00C4	Terminal set scope keyword: GROUP / SYSTEM / USER

Object USERID

Event

evt

SAT information

c
a
t
i
d

c
h
k
m
o
d
e

g
r
o
u
p
n
r

o
b
j
-
u
i
d

o
p
r
o
l
e

p
a
r
l
o
g

p
a
r
p
o
s

p
r
i
n
c
c
l

p
r
o
c
n
a
m

r
e
j
r

r
o
u
t
c
o
d

s
t
a
t
i
o
n

u
p
a
r
m
u
p

u
p
a
r
u
s

u
s
e
r
n
r

Add

UAD

M

-

M

-

E

-

Modify attributes

UMD

M

-

M

-

E

-

Remove

URM

M

-

M

-

Lock

ULK

M

-

M

-

Unlock

UUL

M

-

M

-

Check

UCK

-

M

-

M

-

O

-

O

-

Define protection attributes

USL

M

-

M

-

Modify protection attributes

UML

M

-

M

-

E

-

Modify password protection

UMP

M

-

M

-

E

-

Command
REQUEST-OPERATOR-ROLE

UOP

-

M

O

-

O

-

Command
MODIFY-POSIX-USER-ATTRIBUTES

UPA

M

-

O

-

E

-

O

Command
MODIFY-POSIX-USER-DEFAULTS

UPD

M

-

O

-

E

-

O

Command
MODIFY-USER-PUBSET-ATTRIBUTES

UUP

-

E

-

Command
MODIFY-LOGON-DEFAULTS

UDM

M

-

E

-

Command
SET-LOGON-DEFAULTS

UDS

M

-

E

-

Command
UNLOCK-USER-SUSPEND

UUS

M

-

M

-

Field name	al/fil	exit	Meaning and values of information: SDF data type or keywords
catid	*	0022	Catalog identificator type: c-string 1..4
chkmode	*	0033	Check mode keywords: BATCH/DIALOG/FILE-BATCH-NCHKPASS/ FILE-TFT-CHKPASS/ FILE-TFT-NCHKPASS/NET-DIALOG-ACCESS/ OLD/OPERATOR-CONSOLE/OPERATOR-PROGRAM/ OPERATOR-TERMINAL/POSIX-BATCH/POSIX-REMOTE/ POSIX-RLOGIN/UCON
groupnr	*	00E8	Primary group-id of entry in POSIX group catalog type: integer 0..2³¹-1
obj-uid	*	0011	User identificator as object type: c-string 1..8
oprole	*	00AE	operator role type: c-string 1..8
parlog	+	020D	/SET-LOGON-PROTECTION, /MODIFY-LOGON-PROTECTION, /SET-LOGON-DEFAULTS & /MODIFY-LOGON-DEFAULTS type: x-string 2..19952
parpos	+	020E	/MODIFY-POSIX-USER-ATTRIBUTES & /MODIFY-POSIX-USER-DEFAULTS type: x-string 2..4800
princcl	*	0175	KERBEROS client principal type: c-string 1..1800 with-low
procnam	*	0019	Processor name type: c-string 1..8 (ALARM/FILTER: c-string 8..8)
rejr	*	005A	Reject reason type: x-string 2..8 (ALARM/FILTER: x-string 8..8) Following return codes can be evaluated ('x' represents any value): X'xx01xxxx' Errored parameter list X'xx20xxxx' System error X'xx40xxxx' LOGON rejected (e.g. incorrect password) X'xx80xxxx' LOGON rejected because of temporary resource bottleneck (e.g. memory saturation)
routcod	*	00AD	routing code type: c-string 1..3
station	*	0018	Terminal name type: c-string 1..8 (ALARM/FILTER: c-string 8..8)
uparmup	+	020C	parameter list for /MODIFY-USER-PUBSET-ATTRIBUTES type: x-string 2..296
uparus	+	020B	parameter list for USERID add and modify type: x-string 2..800
usernr	*	00AF	primary owner identification of POSIX resources type: integer 0..2³¹-1

Object UTM

Event TRM
Subcode in
SAT-Information
utmsubc

SAT information

u
t
m
u
s
e
r

u
t
m
a
p
p
l

l
t
e
r
m

p
t
e
r
m

m
u
x
l
t
r
m

d
a
t
n
a
m
1

d
a
t
n
a
m
2

d
a
t
t
y
p
e

u
t
m
a
c
t
y

c
o
m
m
a
n
d

u
t
m
o
b
j
1

u
t
m
o
b
j
2

u
t
m
b
b
j
3*

u
t
m
o
b
j
4

u
t
m
o
b
j
5*

u
t
m
o
b
j
6

User signon (utmsubc=SIGN)

M

O

-

M

-

O

-

Change password (CHANGE-PW)

M

-

O

-

Data access (DATA ACCESS)

M

-

M

O

M

-

O

-

Administrator cmd. (ADM-CMD)

M

O

-

M

O

-

Change access key (CHG-ACC-KEY)

O

-

O

-

Program unit(PU) start (START-PU)

M

-

M

O

-

Terminate PU (END-PU)

M

-

M

O

-

Task connection to UTM application
on (TASK ON)

-

M

-

M

O

-

Task connection to UTM application
off (TASK OFF)

-

M

-

M

-

O

-

Preselection command (SEL-CMD)

M

O

-

M

O

-

Change program (CHG-PROG)

-

O

Dynamic application extension
(DYN-EXT)*

-

O

* after the name: field reserved for future extensions

UTM events (part 1)

Event TRM
Subcode in
SAT-Information
utmsubc

SAT information

u
t
m
o
b
j
7*

u
t
m
c
a
l
l

a
p
p
l
n
a
m

t
a
c
n
a
m

t
a
c
n
a
i
d

u
t
u
s
e
r
2

u
t
m
m
o
d
e*

u
t
m
n
a
m
e

u
t
m
t
y
p
e*

u
t
m
v
e
r
s*

u
t
m
t
a
i
d

u
t
m
s
t
a
t

u
t
m
r
e
a
s

u
t
m
h
e
x.*

o
b
j
-
u
i
d

u
s
e
r
2

User signon (utmsubc=SIGN)

-

O

-

O

-

Change password (CHANGE-PW)

-

O

Data access (DATA ACCESS)

-

Administrator cmd. (ADM-CMD)

-

O

-

O

-

Change access key (CHG-ACC-KEY)

-

M

-

Program unit(PU) start (START-PU)

-

M

-

Terminate PU (END-PU)

-

M

-

Task connection to UTM application
on (TASK ON)

-

Task connection to UTM application
off (TASK OFF)

-

Preselection command (SEL-CMD)

-

O

-

O

-

Change program (CHG-PROG)

O

-

O

-

Dynamic application extension
(DYN-EXT)*

O

-

O

-

* after the name: field reserved for future extensions

UTM events (part 2)

Field name	al/fil	exit	Meaning and values of information: SDF data type or keywords
applnam	*	0025	Application name type: c-string 1..8
command	*	0052	command of utm-administrator type: c-string 1..8
datnam1	*	004E	data name for DATA-ACCESS type: c-string 1..8
datnam2	*	004F	data name for DATA-ACCESS type: c-string 1..8
dattype	*	0050	data type for DATA-ACCESS keywords : G/T/U/L
lterm	*	004B	lterm-name type: c-string 1..8
muxltrm	*	004D	mux lterm name type: c-string 1..8
obj-uid	*	0011	user identifier as object type: c-string 1..8
pterm	*	004C	pterm-name type: c-string 1..8
tacnaid	*	0058	identifier keywords: G/C/T/D/P
tacnam	*	0057	tac-name (START-PU,END-PU,ADM-CMD) type: c-string 1..8
user2	*	0059	UTM user, object of CHANGE-PW type: c-string 1..8
utmacty	*	0051	for DATA-ACCESS keywords : WRITE/READ/C/D
utmappl	*	0049	application name type: c-string 1..8
utmcall	*	0056	caller's address CHANGE-ACCESS-K type: x-string 2..8 (ALARM/FILTER: x-string 8..8)
utmhex1	*	00BC	data 1 type: x-string 2..8 (ALARM/FILTER: x-string 8..8)
utmhex2	*	00BD	data 2 type: x-string 2..8 (ALARM/FILTER: x-string 8..8)
utmhex3	*	00BE	data 3 type: x-string 2..16 (ALARM/FILTER: x-string 16..16)
utmhex4	*	00BF	data 4 type: x-string 2..16 (ALARM/FILTER: x-string 16..16)
utmmode	*	00B1	mode type: c-string 1..4 (ALARM/FILTER: c-string 4..4)
utmname	*	00B2	name type: c-string 1..32
utmobj1	*	0053	1st object of the command type: c-string 1..8
utmobj2	*	0054	2nd object of the command type: c-string 1..8
utmobj3	*	0055	3rd object of the command type: c-string 1..8
utmobj4	*	00B8	4th object of the command type: c-string 1..8 (ALARM/FILTER: c-string 8..8)
utmobj5	*	00B9	5th object of the command type: c-string 1..8 (ALARM/FILTER: c-string 8..8)
utmobj6	*	00BA	6th object of the command type: c-string 1..64 (ALARM/FILTER: C-string 64..64)
utmobj7	*	00BB	7th object of the command type: c-string 1..64 (ALARM/FILTER: C-string 64..64)
utmreas	*	00B7	error code type: c-string 1..8 (ALARM/FILTER: c-string 8..8)
utmstat	*	00B6	state type: c-string 1..1
utmsubc	*	004A	subcode for the utm event keywords: CHG-ACC-KEY/ CHANGE-PW/SIGN/DATA-ACCESS/ ADM-CMD/START-PU/END-PU/ TASK-ON/TASK-OFF/SEL-CMD/ DYN-EXT/CHG-PROG
utmtaid	*	00B5	transaction id type: x-string 2..8 (ALARM/FILTER: x-string 8..8)
utmtype	*	00B3	type type: c-string 1..1
utmuser	*	0048	User ID in UTM application frame type: c-string 1..8
utmvers	*	00B4	version type: c-string 1..8 (ALARM/FILTER: c-string 8..8)

Object VOLUME

Event

evt

SAT information

vol
ume

new
own

vsn1

vsn2

fil
name

dms
rc

share

device

dev
type

ini
func

level

bak
func

Administrator modifies
attributes

VMA

M

-

Remove volume

VRM

M

-

M

-

Add volume

VAD

M

-

M

-

User modifies attributes

VMU

M

-

M

-

User processing volume

VVP

M

-

M

-

M

-

Modify MAREN parameters

VMM

-

Show volume attributes

VSA

M

-

M

-

Show MAREN parameters

VSP

-

Open volume

VON

-

M

-

M

-

Close volume

VCL

-

M

-

M

-

Initialize protected
volume

VIP

O

M

-

M

-

Initialize unprotected
volume

VIN

O

M

-

M

-

Initialize disk

VID

-

M

-

M

-

Install IOCF

VIO

-

M

-

request volume (FDDRL)

VDA

-

M

-

M

-

M

release volume (FDDRL)

VDR

-

M

-

M

-

M

modify volume (FDDRL)

VDU

-

M

-

M

-

M

Field name	al/fil	exit	Meaning and values of information: SDF data type or keywords
bakfunc	*	0040	Backup function (FDDRL) keywords: DISK-DUMP/DISK-COPY/RLOD
device	*	003C	Device name type: c-string 1..8
devtype	*	003D	Device type type: x-string 2..4 (ALARM/FILTER: x-string 4..4)
dmsrc	*	0004	DMS return code type: x-string 2..4 (ALARM/FILTER: x-string 4..4)
filname	*	0003	File name type: c-string 1..54 (ALARM/FILTER: filename)
inifunc	*	003E	Initialization function (VOLIN) keywords: INIT-DISK/FORMAT-DISK
level	*	003F	Level # of the service processor type: x-string 2..2
newown	*	0038	New volume owner type: c-string 1..8
share	*	0023	Share mode keywords: SHARED/EXCLUSIVE
volume	*	0037	Treated owner or volume owner type: c-string 1..8
vsn1	*	0039	volume serial number type: c-string 1..6
vsn2	*	003A	New volume serial number type: c-string 1..6

Your Browser is not longer supported

Please use Google Chrome, Mozilla Firefox or Microsoft Edge to view the page correctly

Tables of auditable information on object-related events (2)

Object POSIX-CHILD-Process

Object POSIX-FILE-and-Directory

Object POSIX-PROCESS

Object POSIX-SYSTEM-Resources

Object PRIVILEGE

Object PROGRAM

Object SAT

Object SAT-ALARM

Object SAT-FILTER

Object SESAM

Additional information on separate data fields

Object SPOOL DEVICE

Object SPOOL JOBS

Object SUBSYSTEM

Object SYNTAX FILE

Object TAPE encryption

Object TERMINAL SET

Object USERID

Object UTM

Object VOLUME

Field name	Contents
hostnam	’SESAM’
applnam	’SEND’
utmuser	’MESSAGE’
appluid	not filled