Audit function codes for z/OS UNIX System Services

Table 1. Audit Function Codes for z/OS UNIX System Services
Code	Name	Description
1	AFC_ACCESS	check file accessibility
2	AFC_CHAUDIT_U	change user audit options
3	AFC_CHDIR	change current working directory
4	AFC_CHMOD	change file modes
5	AFC_CHOWN	change owner and group of file
6	AFC_DUB	initialize a process
7	AFC_EXEC	execute with new jobname
8	AFC_FCHAUDIT_U	change user audit options when file is open
9	AFC_FCHMOD	change file modes when file is open
10	AFC_FCHOWN	change owner and group of file when open
11	AFC_GETCWD	get current working directory
12	AFC_GETPSENT	get process entry
13	AFC_KILL	signal a process
14	AFC_LINK	link to a file
15	AFC_LSTAT	get file status - do not resolve ending symlink
16	AFC_MKDIR	make a directory
17	AFC_MKNOD	make a file node
18	AFC_MOUNT	mount a file system (nosetuid)
19	AFC_OPEN	open a file
20	AFC_OPENDIR	open a directory
21	AFC_PATHCONF	get configurable path name variables
22	AFC_PTRACE	debug a process
23	AFC_READLINK	read a symbolic link
24	AFC_RENAME	rename a file
25	AFC_RMDIR	remove a directory
26	AFC_SETEGID	set effective GID
27	AFC_SETEUID	set effective UID
28	AFC_SETGID	set real and/or effective GID
29	AFC_SETUID	set real and/or effective UID
30	AFC_STAT	get file status
31	AFC_SYMLINK	create a symbolic link
32	AFC_UNLINK	remove directory entries (delete a file)
33	AFC_UNMOUNT	unmount a file system (nosetuid)
34	AFC_UTIME	set file access/modification times
35	AFC_UNDUB_EXIT	terminate a process
36	AFC_WRITE	write to a file (clear setid bits)
37	AFC_CHAUDIT_A	change auditor audit options
38	AFC_FCHAUDIT_A	change auditor audit options when file is open
39	AFC_LOOKUP	path name resolution
40	AFC_TTYNAME	get pathname of terminal
41	AFC_IOCTL	get path name
42	AFC_GETMNT	get mount entry
43	AFC_QUIESCE	quiesce a file system (nosetuid)
44	AFC_UNQUIESCE	unquiesce a file system (nosetuid)
45	AFC_VREGISTER	server registration, v_reg
46	AFC_VRESOLVEPN	server resolve pathname, v_rpn
47	AFC_VLOOKUP	server lookup, v_lookup
48	AFC_VREADWRITE	server read write, v_rdwr
49	AFC_VREADDIR	server read directory, v_reddir
50	AFC_SIGACTION	change Osigset action
51	AFC_VCREATE	server create, v_create
52	AFC_VMAKEDIR	server make directory, v_mkdir
53	AFC_VSYMLINK	server symbolic link, v_symlink
54	AFC_VSETATTR	server file attributes, v_setattr
55	AFC_VLINK	server link, v_link
56	AFC_VREMOVEDIR	server remove directory, v_rmdir
57	AFC_VREMOVE	server remove, v_remote
58	AFC_VRENAME	server rename, v_rename
59	AFC_CHATTR	change file attributes
60	AFC_FCHATTR	change file attributes when file is open
61	AFC_THLMT	set thread limit
62	AFC_MSGCTL	message control
63	AFC_MSGGET	get message queue
64	AFC_MSGRCV	message receive
65	AFC_MSGSND	message send
66	AFC_SEMCTL	semaphore control
67	AFC_SEMGET	get set of semaphores
68	AFC_SEMOP	semaphore operations
69	AFC_SHMAT	shared memory attach
70	AFC_SHMCTL	shared memory control
71	AFC_SETREUID	set real and/or effective UID
72	AFC_SHMGET	shared memory get
73	AFC_WGETIPC	query IPC status
74	AFC_REMOVE	remove
75	AFC_SET_MODE	set mode
76	AFC_SET_MSGQB	set max bytes for msg queue
77	AFC_SET_GID	set supplementary groups
78	AFC_PASSWORD	verify password
79	AFC_LCHOWN	change owner and group of a symbolic link
80	AFC_TRUNCATE	truncate a file
81	AFC_PFSCTL	control function for the physical file system
82	AFC_SETRLIMIT	set maximum resource consumption
83	AFC_SETPRIORITY	set process scheduling priority
84	AFC_NICE	change priority of a process
85	AFC_SETREGID	set real and effective GID
86	AFC_WRITEV	write on a file
87	AFC_FCHDIR	change working directory
88	AFC_CHROOT	change root directory
89	AFC_REALPATH	resolve path name
90	AFC_STATVFS	get file system information
91	AFC_BIND	bind a name to a socket
92	AFC_SOCKET	create an endpoint for communication
93	AFC_THREAD_SEC	thread level security
94	AFC_AUTHCHECK	authority check
95	AFC_ACC_SEND	send access rights
96	AFC_ACC_RECV	receive access rights
97	AFC_ACC_DISC	discard access rights
98	AFC_NEWGRP	newgrp shell utility
99	AFC_CONSOLE	console communication service
100	AFC_SERV_INIT	WLM service
101	AFC_SPAWN	spawn with user ID
102	AFC_SWAP_SERV	swap services
103	AFC_WLMC	WLM C and C++
104	AFC_LOGIN	__login system call
105	AFC_MOUNT_SETUID	mount a file system (setuid)
106	AFC_UNMOUNT_SETUID	unmount a file system (setuid)
107	AFC_QUIESCE_SETUID	quiesce a file system (setuid)
108	AFC_UNQUIESCE_SETUID	unquiesce a file system (setuid)
109	AFC_CHMOUNT	change mount point of a file system
110	AFC_CHMOUNT_SETUID	change mount point of a file system (setuid)
111	AFC_SETFACL	add, alter, or delete an access control list
112	AFC_SHUTDOWN_REG	shutdown registration
113	AFC_EACCESS	check effective access
114	AFC_SETFSECL	Set file security label
115	AFC_POE	Provide port of entry identifier
116	AFC_LCHATTR	Change file attributes
117	AFC_UNAVAILABLE	AFC unavailable
118	AFC_MOUNT_NA	mount no audit
119	AFC_MOUNT_U	mount
120	AFC_MOUNT_UNA	user mount no audit
121	AFC_UNMOUNT_U	user unmount
122	AFC_UNMOUNT_UNA	user unmount no audit
123	AFC_FSACCESS	File system access
124	AFC_SHMMCV	Shared memory segment mutexes and condition variables
125	AFC_FSEXEC	File system execute access
126	AFC_ENDOF_TAB	end of table