Auditable events

Line printer system events

The following events record actions related to the line printer (LP) system.

Line printer events

Event Description Manual page Object audit

cancel_job cancel a print job cancel(1)
lpsched(1M) N

lp_admin administrative use of LP system lpadmin(1M) N

lp_misc miscellaneous use of LP system lpsched(1M) N

prt_job start/end of a print job lp(1) N

Event	Description	Manual page	Object audit
`cancel_job`	cancel a print job	cancel(1) lpsched(1M)	N
`lp_admin`	administrative use of LP system	lpadmin(1M)	N
`lp_misc`	miscellaneous use of LP system	lpsched(1M)	N
`prt_job`	start/end of a print job	lp(1)	N

The following events deal with the interaction between MAC security levels and the printer system.

NOTE: MAC events are recorded only in log files generated on systems running UNIX System V Release 4.1 Enhanced Security, or UNIX System V Release 4.2MP, with the Enhanced Security Utilities installed. Unless you are processing a log file from a system running one of these releases, you will not see these events.

Line printer MAC events

Event Description Manual page Object audit

page_lvl printer does not support per-page label lp(1) N

prt_lvl override output label lp(1) N

trunc_lvl truncate a printed level lp(1) N

Event	Description	Manual page	Object audit
`page_lvl`	printer does not support per-page label	lp(1)	N
`prt_lvl`	override output label	lp(1)	N
`trunc_lvl`	truncate a printed level	lp(1)	N