1 
 2 
 3 AK50 (Multics System Administration Procedures)
 4 
 5 
 6 
 7 02/13/89        Errata Information for MR 12.2
 8 
 9 
10 pg 25-13 under "DETAILED BINARY  DATA FORMAT FOR FILE SYSTEM
11      OBJECTS" in the description  of <branch_switches> delete the
12      sentence "(Note  that the "audit"  switch has no  meaning in
13      MR11)".
14 
15 pg 25-17 under "SYSERR LOG  AUDIT SELECTIVITY"  change the
16      reference from  "two levels" of audit  selectivity to "three
17      levels," the third level being "file system object level."
18 
19 
20 pg 25-36 Add the following description:
21 
22                  FILE SYSTEM OBJECT AUDIT FLAGS
23      A  file  system  object  audit  flag,  known  as  the "audit
24      switch", is  associated with each entry in  the file system.
25      The  setting of  this switch   can only  be modified  by the
26      system security  administrator.  If this switch  is on, then
27      all   accesses  of   the  segment,   either  successful   or
28      unsuccessful,  are audited.   In the  case of  mailboxes and
29      message   segments,   audit   messages   are   produced  for
30      segment-level accesses (e.g.,  opening, deleting, reading or
31      changing ACLs,  reading or changing attributes)  but not for
32      message-level   accesses  (adding,  deleting,   reading,  or
33      updating messages).
34 
35 
36 pg B-10  under "DETAILED OPERATION FIELD  OF STANDARD BINARY
37      HEADER" add:   dcl FS_OBJ_AUDIT_FLAG_MOD fixed bin  (18) uns
38      init (37) static options (constant):
39 
40 
41 pg B-12 under "FILE SYSTEM DETAILED OPERATION CODES" add:
42      FS_OBJ_AUDIT_FLAG_MOD (fs_obj_status_mod)
43           appears upon an  attempt to change the audit  switch of a
44           file system entry.
45 
46 
47 
48 
49 
50 
51