View source for AUDIT (privilege)

The '''AUDIT''' privilege allows software to append audit records to the system security audit log file using one of four system services: [[$AUDIT_EVENT]], [[$CHECK_PRIVILEGE]], [[$CHKPRO]], or [[$CHECK_ACCESS]]. In addition, the $AUDIT_EVENT system service allows all components of an audit message to be specified. As a result, this privilege permits the logging of events that appear to have come from the operating system or a
user process.
Grant this privilege only to trusted images that need to append audit messages to the system audit log file. 
Users possessing this privilege can provoke a system failure by attempting to log invalid events with the NSA$M_INTERNAL flag set.

[[Category:System Privileges]]