UA—user auditing

The UA (user auditing) line command can be entered against any directory entry. This line command causes the Modify z/OS® UNIX File User Audit Options panel to be displayed.

Figure 1. Modify z/OS UNIX File User Audit Options panel (ISRUULUA)

   Menu  Utilities  View  Options  Help
 ┌─────────────────────────────────────────────────────────────────────────────┐
 │                  Modify z/OS UNIX File User Audit Options                   │
 │ Command ===>                                                                │
 │                                                                             │
 │ Pathname . : /u/myhome/prog1                                                │
 │ Type . . . : File                                                           │
 │                                                                             │
 │ Read 2  1. None     Write 2  1. None     Execute 2  1. None                 │
 │         2. Failure           2. Failure             2. Failure              │
 │         3. Success           3. Success             3. Success              │
 │         4. Both              4. Both                4. Both                 │
 │                                                                             │
 │                                                                             │
 │                                                                             │
 │                                                                             │
 │                                                                             │
 │  F1=Help        F2=Split       F3=Exit        F4=Expand      F7=Backward    │
 │  F8=Forward     F9=Swap       F10=Actions    F12=Cancel                     │
 └─────────────────────────────────────────────────────────────────────────────┘


  F1=Help      F2=Split     F3=Exit      F4=Expand    F7=Backward  F8=Forward
  F9=Swap     F10=Actions  F12=Cancel

The Pathname field displays the path name of the selected file. The Type field display the file type for the selected file.

The user auditing options for the file can be changed by a superuser or the owner. These options allow you to define the access attempts that are audited by the security system. You can specify auditing to occur for read, write, and search or execute attempts on the file or directory.

The panel displays fields for specifying the Read, Write and Execute (or search) audit settings. For each of these fields, you enter one of the listed numbers corresponding to one of these results for the access attempt:

None: No audit record is to be written for this type of access.
Failure: Write an audit record if this type of access fails.
Success: Write an audit record if this type of access is successful.
Both: Write an audit record for both failed and successful access attempts.