audomon: kernel audit daemon has switched auditing to the backup trail
audomon: FreeSpaceSwitch point reached, but audomon failed to switch audit trail
audomon: AuditFileSwitch point reached, but audomon failed to switch audit trail
audomon: failed to update audit trail configuration information in /etc/audit/audnames:current_trail=pathname of current trail
•audsys(1M) (admin) audsys: argv1 … argvn
audsys: various error condition messages (too many to list here)
audsys: current audit trail directory is changed to pathname
audsys: auditing system started
audsys: auditing system
•authadm(1M), roleadm(1M), cmdprivadm(1M) (admin)
ACCESS CONTROL CHECK:successfulfailed; username=username; program=authadmroleadmcmdprivadm; euid=euid; ruid=ruid; egid=egid; rgid=rgid;
ACCESS CONTROL SUPPRESS:successfulfailed; username=username; program=authadmroleadmcmdprivadm; euid=euid; ruid=ruid; egid=egid; rgid=rgid;
•chfn(1) (admin)
User= name Temporary file busy (open or lockf of /etc/ptmp failed) User= name No account for user
User= Current user No passwd file entry User= name Error in chown (of /etc/ptmp) User= name Error in chmod (of /etc/ptmp) User= name Successful chfn
•chsh(1) (admin)
User= name shell= shell Permission denied
User= name shell= shell Temporary file busy (open or lockf of /etc/ptmp failed)
User= name shell= shell Can’t create temporary file (/etc/ptmp) User= name shell= shell Can’t recover (can not rename /etc/ptmp to /etc/passwd)
User= name shell= shell Chsh failed
User= name shell= shell Successfully changed
•dtlogin(1)
User=name uid= user id audid= audit id attempted to login - too many users on the system
User=name uid= user id audid= audit id attempted to login - bad audit flag
User=name uid= user id audid= audit id attempted to login - bad audit id User=name uid= user id audid= audit id attempted to login - bad group id User=name uid= user id audid= audit id attempted to login - bad user id User=name uid= user id audid= audit id Successful login - no home directory
User=name uid= user id audid= audit id attempted to login - no home directory
User=name uid= user id audid= audit id Successful login User=name uid= user id audid= audit id Failed login (bailout)
9