Audit Resource Access Rejected

struct ae_resaccessrej {
  unsigned short ae_rr_compname; /* offset */
  unsigned short ae_rr_username; /* offset */
  unsigned short ae_rr_resname;  /* offset */
  unsigned short ae_rr_operation;
};

where:

• ae_rr_compname is an offset (from the beginning address of the ae_resaccessrej data structure) to an ASCIIZ string indicating the requester that established the session.

• ae_rr_username is an offset (from the beginning address of the ae_resaccessrej data structure) to an ASCIIZ string indicating the name of the user who initiated the session. If 0, ae_rr_username and ae_rr_compname are the same.

• ae_rr_resname is an offset (from the beginning address of the ae_resaccessrej data structure) to an ASCIIZ string indicating the name of the resource to which access was denied.

• ae_rr_operation is one of seven values indicating the operation requested. These values, defined in the ACCESS.H header file, mean the following: ┌─────────────────────────┬───────┬────────────────────────────────────────────┐
  │ SYMBOLIC CONSTANT │ BIT │ MEANING │
  │ │ MASK │ │
  ├─────────────────────────┼───────┼────────────────────────────────────────────┤
  │ ACCESS_READ │ 0x01 │ Data was read or run from a resource. │
  ├─────────────────────────┼───────┼────────────────────────────────────────────┤
  │ ACCESS_WRITE │ 0x02 │ Data was written to a resource. │
  ├─────────────────────────┼───────┼────────────────────────────────────────────┤
  │ ACCESS_CREATE │ 0x04 │ An instance of the resource (such as a │
  │ │ │ file) was created; data may have been │
  │ │ │ written to the resource while the resource │
  │ │ │ was being created. │
  ├─────────────────────────┼───────┼────────────────────────────────────────────┤
  │ ACCESS_EXEC │ 0x08 │ A resource was run. │
  ├─────────────────────────┼───────┼────────────────────────────────────────────┤
  │ ACCESS_DELETE │ 0x10 │ A resource was deleted. │
  ├─────────────────────────┼───────┼────────────────────────────────────────────┤
  │ ACCESS_ATRIB │ 0x20 │ Attributes of a resource were changed. │
  ├─────────────────────────┼───────┼────────────────────────────────────────────┤
  │ ACCESS_PERM │ 0x40 │ Permissions (read, write, create, execute, │
  │ │ │ and delete) of a resource for a user or │
  │ │ │ application were changed. │
  └─────────────────────────┴───────┴────────────────────────────────────────────┘