Components of the DCE Audit Service
The DCE Audit Service has three basic components:
· Application programming interfaces (APIs)
Provide the functions that are used to detect and record critical events when the application server services a client. The application programmer uses these functions at certain code
points in the application server program to actuate the recording of audit events. Other APIs can be used to create tools that examine and analyze the audit event records.
· audit daemon
The audit daemon provides the following services:
- Maintains the filters and the central audit trail file.
- Exports an RPC interface with which it can be controlled by the DCE control program (dcecp).
· DCE control program
The DCE Audit Service's management interface to the audit daemon. As an administrator, you can use it to specify how the audit daemon will filter the recording of audit events.
|