Home
Security
You can secure your Informix® database server and the data that is stored in your Informix databases. You can encrypt data, secure connections, control user privileges and access, and audit data security.
Security in HCL Informix®
The Informix® Security Guide documents methods for keeping your data secure by preventing unauthorized viewing and altering of data or database objects, including how to use the secure-auditing facility of the database server.
Auditing data security
The ADTCFG file
ADTROWS configuration parameter
Use the ADTROWS configuration parameter to control selective row-level auditing of tables.

Security
You can secure your Informix® database server and the data that is stored in your Informix databases. You can encrypt data, secure connections, control user privileges and access, and audit data security.
- Security in HCL Informix®
  The Informix® Security Guide documents methods for keeping your data secure by preventing unauthorized viewing and altering of data or database objects, including how to use the secure-auditing facility of the database server.
  - Securing data
  - Auditing data security
    - Overview of auditing with the Informix® secure auditing facility
    - Audit administration
    - Audit analysis
    - The onaudit utility
      Use the onaudit utility to manage audit masks and auditing configuration.
    - The onshowaudit utility
      Use the onshowaudit utility to view the audit information from an existing audit trail. You can use this command to extract information for a particular user, database server, or both, making it possible to isolate a particular subset of data from a potentially large audit trail.
    - Audit event codes and fields
      The secure-auditing facility audits certain database server events.
    - The ADTCFG file
      - ADTCFG file conventions
      - ADTERR configuration parameter
        ADTERR specifies how the database server behaves when it encounters an error while it writes an audit record.
      - ADTMODE configuration parameter
        Use ADTMODE to control the level of auditing. The ADTMODE parameter is now deprecated; you should use the new ADT_CLASSIC_ENABLED, ADT_DBSA, and ADT_DBSSO parameters instead.
      - ADTPATH configuration parameter
        ADTPATH specifies the directory in which the database server saves audit files.
      - ADTROWS configuration parameter
        Use the ADTROWS configuration parameter to control selective row-level auditing of tables.
      - ADTSIZE configuration parameter
        Use the ADTSIZE configuration parameter to specify the maximum size of an audit file.
      - ADT_CLASSIC_ENABLED configuration parameter
        Use this configuration parameter to enable or disable classical (as opposed to syslog) auditing.
      - ADT_DBSA configuration parameter
        Use this configuration parameter to enable or disable the mandatory auditing for the DBSA group.
      - ADT_DBSSO configuration parameter
        Use this configuration parameter to enable or disable the mandatory auditing for the DBSSO group.
      - ADT_SYSLOG_ENABLED configuration parameter
        Use this configuration parameter to enable or disable the Audit to Syslog (ASL) functionality.
      - ADT_SYSLOG_FACILITY configuration parameter
        Use this configuration parameter to help with filtering messages in the syslog configuration.
      - ADT_SYSLOG_IDENTIFIER configuration parameter
        Use this configuration parameter to choose the identifier name to be used in syslog messages.
      - ADT_SYSLOG_OPTIONS configuration parameter
        Use this configuration parameter to specify options to openlog().
      - ADT_SYSLOG_PRIORITY configuration parameter
        Use this configuration parameter to specify a priority while filtering messages in the syslog daemon.

ADTROWS configuration parameter

Use the ADTROWS configuration parameter to control selective row-level auditing of tables.

default value

range of values

0, 1, 2

takes effect

When onaudit is run to change the value or after the database server is restarted.

utility

onaudit (onaudit -R row mode)

Where row mode is set to:

0 for auditing row-level events on all tables
1 to allow control of which tables are audited. Row-level events DLRW, INRW, RDRW, and UPRW are audited only on tables for which the AUDIT flag is set.
2 to turn on selective row-level auditing and also to include the primary key in audit records (the primary key is only recorded if it is an integer)

see

CREATE TABLE and ALTER TABLE in the Informix® Guide to SQL: Syntax