Home
Security
You can secure your Informix® database server and the data that is stored in your Informix databases. You can encrypt data, secure connections, control user privileges and access, and audit data security.
Security in HCL Informix®
The Informix® Security Guide documents methods for keeping your data secure by preventing unauthorized viewing and altering of data or database objects, including how to use the secure-auditing facility of the database server.
Auditing data security
The ADTCFG file
ADTPATH configuration parameter
ADTPATH specifies the directory in which the database server saves audit files.

Security
You can secure your Informix® database server and the data that is stored in your Informix databases. You can encrypt data, secure connections, control user privileges and access, and audit data security.
- Security in HCL Informix®
  The Informix® Security Guide documents methods for keeping your data secure by preventing unauthorized viewing and altering of data or database objects, including how to use the secure-auditing facility of the database server.
  - Securing data
  - Auditing data security
    - Overview of auditing with the Informix® secure auditing facility
    - Audit administration
    - Audit analysis
    - The onaudit utility
      Use the onaudit utility to manage audit masks and auditing configuration.
    - The onshowaudit utility
      Use the onshowaudit utility to view the audit information from an existing audit trail. You can use this command to extract information for a particular user, database server, or both, making it possible to isolate a particular subset of data from a potentially large audit trail.
    - Audit event codes and fields
      The secure-auditing facility audits certain database server events.
    - The ADTCFG file
      - ADTCFG file conventions
      - ADTERR configuration parameter
        ADTERR specifies how the database server behaves when it encounters an error while it writes an audit record.
      - ADTMODE configuration parameter
        Use ADTMODE to control the level of auditing. The ADTMODE parameter is now deprecated; you should use the new ADT_CLASSIC_ENABLED, ADT_DBSA, and ADT_DBSSO parameters instead.
      - ADTPATH configuration parameter
        ADTPATH specifies the directory in which the database server saves audit files.
      - ADTROWS configuration parameter
        Use the ADTROWS configuration parameter to control selective row-level auditing of tables.
      - ADTSIZE configuration parameter
        Use the ADTSIZE configuration parameter to specify the maximum size of an audit file.
      - ADT_CLASSIC_ENABLED configuration parameter
        Use this configuration parameter to enable or disable classical (as opposed to syslog) auditing.
      - ADT_DBSA configuration parameter
        Use this configuration parameter to enable or disable the mandatory auditing for the DBSA group.
      - ADT_DBSSO configuration parameter
        Use this configuration parameter to enable or disable the mandatory auditing for the DBSSO group.
      - ADT_SYSLOG_ENABLED configuration parameter
        Use this configuration parameter to enable or disable the Audit to Syslog (ASL) functionality.
      - ADT_SYSLOG_FACILITY configuration parameter
        Use this configuration parameter to help with filtering messages in the syslog configuration.
      - ADT_SYSLOG_IDENTIFIER configuration parameter
        Use this configuration parameter to choose the identifier name to be used in syslog messages.
      - ADT_SYSLOG_OPTIONS configuration parameter
        Use this configuration parameter to specify options to openlog().
      - ADT_SYSLOG_PRIORITY configuration parameter
        Use this configuration parameter to specify a priority while filtering messages in the syslog daemon.

ADTPATH configuration parameter

ADTPATH specifies the directory in which the database server saves audit files.

Make sure that the directory that you specify has appropriate access privileges to prevent unauthorized use of audit records. To change the ADTPATH value with onaudit, database server-managed auditing must be on.

The ADTPATH values are:

default value: /usr/informix/aaodir (on UNIX™), %informixdir%\aaodir (on Windows™)
range of values: Any valid directory path
takes effect: When onaudit is run to change the value or after shared memory is initialized
utility: onaudit (onaudit -p auditdir)