AUDIT_CLASS(5)

NAME
audit_class - contains audit event class descriptions

DESCRIPTION
The audit_class file contains descriptions of the auditable event classes on the system. Each auditable event is a member of an event class. Each line maps an audit event mask (bitmap) to a class and a description. Entries are of the form classmask:eventclass:description.

Example entries in this file are:

    0x00000000:no:invalid class
    0x00000001:fr:file read
    0x00000002:fw:file write
    0x00000004:fa:file attribute access
    0x00000080:pc:process
    0xffffffff:all:all flags set

FILES
/etc/security/audit_class