The Display Object Auditing command displays all audited objects in a
list of libraries or all libraries. Auditing of an object is set by
the CHGOBJAUD command or when an object is created based on the
CRTOBJAUD parameter of a library. The system value QAUDCTL must
specify *OBJAUD. Options exist for selection by object type, a list
of omitted libraries, and the library type.
You must have *ALLOBJ authority to request a LIB value of *ALL,
*ALLUSR, *ALLUSR2, *ALLNONQ, or *IBM.
For an overview of the system and TAA auditing functions, see the
documentation member 'AUDITING'.
A typical command would be:
DSPOBJAUD LIB(xxx)
A list of any objects in the named library that are being audited is
displayed.
System auditing of objects
--------------------------
Auditing of objects may be set in one of two ways:
** Using the CHGOBJAUD command.
** When a library is created, the CRTOBJAUD parameter defaults to
*SYSVAL which determines whether new objects created in the
library will be audited.
The QCRTOBJAUD system value is shipped as *NONE meaning objects will
not be audited by default. The values that may be specified for the
QCRTOBJAUD system value are the same as may be specified on
CHGOBJAUD:
** *NONE. No auditing occurs.
** *USRPRF. An auditing entry only occurs if the user profile is
being audited. See later comments.
** *CHANGE. An audit entry occurs if the object is changed.
** *ALL. An audit entry occurs if the object is changed or used
(such as a program is run or a file is read or updated).
The auditing attribute of a library may be seen with the DSPLIBD
command.
The auditing attribute of an object may be seen with the DSPOBJD
command. The DSPOBJAUD command builds an outfile of DSPOBJD
information and selects on the auditing attribute.
The OBJAUD parameter of CHGOBJAUD allows for *NONE, *CHANGE, *ALL, or
*USRPRF. *USRPRF means an audit entry will not be written unless the
user profile making the change is set for auditing using the
CHGUSRAUD command. CHGUSRAUD also supports the OBJAUD parameter.
Just requesting that an object be audited does not cause an audit
entry to be sent. The QAUDCTL system value must also be set to
*OBJAUD.
Therefore, if the object is set for auditing (such as *CHANGE or
*ALL) and the QAUDCTL system value requests *OBJAUD, an audit journal
entry will be sent when the object is changed or used. For example,
if the object auditing level is *ALL, an audit entry will be sent if
a file is read or a program is called. The journal entry code is 'T'
and the entry type will vary depending on the operation performed on
the object such as 'ZC' describes an object change.
DSPOBJAUD escape messages you can monitor for
---------------------------------------------
None. Escape messages from based on functions will be re-sent.
DSPOBJAUD Command parameters *CMD
----------------------------
LIB A list of up to 300 libraries or generic library
names to be processed. A single value may be
entered for *LIBL, *USRLIBL, *CURLIB, *ALL, *ALLUSR,
*ALLUSR2, *ALLNONQ, or *IBM.
*IBM causes all libraries to be included based on
the definition for DSPOBJD LIB(*IBM).
*ALLUSR2 is similar to *ALLUSR. It omits the same #
libraries, but also omits any library beginning with
Q. Note that if you have your own library which
begins with Q, it is omitted.
*ALLNONQ means any library that does not begin with
the letter Q.
ASPDEV Specifies the auxiliary storage pool (ASP) device
name where storage for the library containing the
object is allocated. If the library resides in an
ASP that is not part of the thread's library name
space, this parameter must be specified to ensure
the correct library is searched. If this parameter
is used when the library qualifier specified for the
Object prompt (OBJ parameter) is *CURLIB, *LIBL, or
*USRLIBL, ASPDEV(*) is the only valid value.
This parameter can be specified as a list of two
values (elements) or as a single value. The
possible single values are:
* = The ASPs that are currently part of the thread's
library name space will be searched to locate the
library. This includes the system ASP (ASP 1), all
defined basic user ASPs (ASPs 2-32), and, if the
thread has an ASP group, the primary and secondary
ASPs in the thread's ASP group.
*ALLAVL = All available ASPs will be searched. This
includes the system ASP (ASP 1), all defined basic
user ASPs (ASPs 2-32), and all available primary and
secondary ASPs, (ASPs 33-255) with a status of
'Available'.
*CURASPGRP = If the thread has an ASP group, the
primary and secondary ASPs in the thread's ASP group
will be searched to locate the library. The system
ASP (ASP 1) and defined basic user ASPs (ASPs 2-32)
will not be searched. If no ASP group is associated
with the thread, an error will be issued.
*SYSBAS = The system ASP (ASP 1) and all defined
basic user ASPs (ASPs 2-32) will be searched to
locate the library. No primary or secondary ASPs
will be searched even if the thread has an ASP
group.
Element 1: Device
The device name of the primary or secondary ASP to
be searched. The primary or secondary ASP must have
been activated (by varying on the ASP device) and
have a status of 'Available'. The system ASP (ASP
1) and defined user basic ASPs (ASPs 2-32) will not
be searched.
Element 2: Search type
*ASP = Specifies that only the single auxiliary
storage pool (ASP) device named in element 1 is to
be searched.
*ASPGRP = Specifies that the entire group of the
primary auxiliary storage pool (ASP) device named in
element 1 is to be searched.
OBJTYP A list of up to 50 object types that will be
processed. *ALL is the default for all object
types. Use the prompter for the list of supported
object types.
AUDITED A *YES/*NO value for whether the only objects that
appear in the listing are being audited.
*YES is the default to list only those objects that
are being audited.
*NO may be specified to list all objects.
AUDITTYPE The type of auditing that is specified for the
object.
If AUDITED(*NO) is specified, only *ANY or *NONE may
be entered.
If AUDITED(*YES) is specified, only *ANY, *USRPRF,
*CHANGE, or *ALL may be entered.
LIBTYPE Whether to select all or a specified library type.
*ALL is the default to select all types.
*PROD may be used to select only production (PROD)
libraries.
*TEST may be used to select only test (TEST)
libraries.
OMITLIB A list of up to 300 libraries or generic library
names that should be omitted. *NONE is the default.
An omit list may not be entered for LIB(*CURLIB).
Any libraries entered are checked for existence.
No check occurs to see if an omit library would have
been selected. For example, if LIB(*LIBL) is
entered with OMITLIB(ABC) and library ABC is not on
the library list, no error occurs.
OUTPUT How to output the results. * is the default to
display the spooled file if the command is entered
interactively. The spooled file is deleted after it
is displayed.
If the command is entered in batch or *PRINT is
specified, the spooled file is output and retained.
Restrictions
------------
You must have *ALLOBJ authority to request a LIB value of *ALL,
*ALLUSR, *ALLUSR2, *ALLNONQ, or *IBM.
Prerequisites
-------------
The following TAA Tools must be on your system:
CHKALLOBJ Check *ALLOBJ special authority
CVTLIBOBJD Convert library object description
EDTVAR Edit variable
EXTLST2 Extract list 2
RTVSYSVAL3 Retrieve system value 3
SNDCOMPMSG Send completion message
SNDESCINF Send escape information
SNDESCMSG Send escape message
SNDSTSMSG Send status message
Implementation
--------------
None, the tool is ready to use.
Objects used by the tool
------------------------
Object Type Attribute Src member Src file
------ ---- --------- ---------- ----------
DSPOBJAUD *CMD TAASEHH QATTCMD
TAASEHHC *PGM CLP TAASEHHC QATTCL
TAASEHHR *PGM RPG TAASEHHR QATTRPG
|
