|
|
The
-t
option of the
auditrpt
command is used to display audit information for specific object types.
Object types are identified by single letter codes, as follows:
Object type codes
| Character | Object type |
|---|---|
| f | regular files |
| c | character special files |
| b | block special files |
| l | links |
| d | directories |
| p | named pipes or unnamed pipes |
| s | semaphores |
| h | shared memory |
| m | messages |
The argument to the
-t
option may consist of one or more object types.
Each object type must be separated by a comma.
A space
will be interpreted as the end of the list of object types.
For example, to display all audit records for semaphores,
enter the following command:
auditrpt -t s
For example, the following command would display all audit records for
both semaphores and pipes:
auditrpt -t s,p
If the object type is invalid,
auditrpt
displays the following error message and terminates processing:
invalid object type specified: object_type