Home
Security
You can secure your Informix® database server and the data that is stored in your Informix databases. You can encrypt data, secure connections, control user privileges and access, and audit data security.
Security in HCL Informix®
The Informix® Security Guide documents methods for keeping your data secure by preventing unauthorized viewing and altering of data or database objects, including how to use the secure-auditing facility of the database server.
Auditing data security
Audit administration
Auditing setup
Specifying a directory for the audit trail (UNIX™)

Security
You can secure your Informix® database server and the data that is stored in your Informix databases. You can encrypt data, secure connections, control user privileges and access, and audit data security.
- Security in HCL Informix®
  The Informix® Security Guide documents methods for keeping your data secure by preventing unauthorized viewing and altering of data or database objects, including how to use the secure-auditing facility of the database server.
  - Securing data
  - Auditing data security
    - Overview of auditing with the Informix® secure auditing facility
    - Audit administration
      - Administrative roles and role separation
      - Auditing setup
        Setting up the default and global masks
        Specifying a directory for the audit trail (UNIX™)
        Setting the error mode
        Setting the audit level
        Setting up selective row-level auditing
        Auditing can be configured so that row-level events of only selected tables are recorded in the audit trail. Selective row-level auditing can compact audit records so that they are more manageable and potentially improve database server performance.
        Activating auditing
      - Audit mask maintenance
      - Audit configuration maintenance
    - Audit analysis
    - The onaudit utility
      Use the onaudit utility to manage audit masks and auditing configuration.
    - The onshowaudit utility
      Use the onshowaudit utility to view the audit information from an existing audit trail. You can use this command to extract information for a particular user, database server, or both, making it possible to isolate a particular subset of data from a potentially large audit trail.
    - Audit event codes and fields
      The secure-auditing facility audits certain database server events.
    - The ADTCFG file

Specifying a directory for the audit trail (UNIX™)

The database server stores audit files in a file system directory. You can specify the directory with the onaudit utility. For example, the following command specifies /work/audit as the UNIX™ file system in which the database server is to store audit files:

onaudit -p /work/audit

Note: The onaudit -p /work/audit command works only if logging is enabled or if -1 N options are included in the command line.

You can change the audit directory at any time. You can also set up the type of auditing and specify the directory with the ADTCFG file, which is described in The ADTCFG file.

For more information about the onaudit utility, see The onaudit utility: Configure audit masks.