Home
Security
You can secure your Informix® database server and the data that is stored in your Informix databases. You can encrypt data, secure connections, control user privileges and access, and audit data security.
Security in HCL Informix®
The Informix® Security Guide documents methods for keeping your data secure by preventing unauthorized viewing and altering of data or database objects, including how to use the secure-auditing facility of the database server.
Auditing data security
The ADTCFG file
ADT_SYSLOG_PRIORITY configuration parameter
Use this configuration parameter to specify a priority while filtering messages in the syslog daemon.

Security
You can secure your Informix® database server and the data that is stored in your Informix databases. You can encrypt data, secure connections, control user privileges and access, and audit data security.
- Security in HCL Informix®
  The Informix® Security Guide documents methods for keeping your data secure by preventing unauthorized viewing and altering of data or database objects, including how to use the secure-auditing facility of the database server.
  - Securing data
  - Auditing data security
    - Overview of auditing with the Informix® secure auditing facility
    - Audit administration
    - Audit analysis
    - The onaudit utility
      Use the onaudit utility to manage audit masks and auditing configuration.
    - The onshowaudit utility
      Use the onshowaudit utility to view the audit information from an existing audit trail. You can use this command to extract information for a particular user, database server, or both, making it possible to isolate a particular subset of data from a potentially large audit trail.
    - Audit event codes and fields
      The secure-auditing facility audits certain database server events.
    - The ADTCFG file
      - ADTCFG file conventions
      - ADTERR configuration parameter
        ADTERR specifies how the database server behaves when it encounters an error while it writes an audit record.
      - ADTMODE configuration parameter
        Use ADTMODE to control the level of auditing. The ADTMODE parameter is now deprecated; you should use the new ADT_CLASSIC_ENABLED, ADT_DBSA, and ADT_DBSSO parameters instead.
      - ADTPATH configuration parameter
        ADTPATH specifies the directory in which the database server saves audit files.
      - ADTROWS configuration parameter
        Use the ADTROWS configuration parameter to control selective row-level auditing of tables.
      - ADTSIZE configuration parameter
        Use the ADTSIZE configuration parameter to specify the maximum size of an audit file.
      - ADT_CLASSIC_ENABLED configuration parameter
        Use this configuration parameter to enable or disable classical (as opposed to syslog) auditing.
      - ADT_DBSA configuration parameter
        Use this configuration parameter to enable or disable the mandatory auditing for the DBSA group.
      - ADT_DBSSO configuration parameter
        Use this configuration parameter to enable or disable the mandatory auditing for the DBSSO group.
      - ADT_SYSLOG_ENABLED configuration parameter
        Use this configuration parameter to enable or disable the Audit to Syslog (ASL) functionality.
      - ADT_SYSLOG_FACILITY configuration parameter
        Use this configuration parameter to help with filtering messages in the syslog configuration.
      - ADT_SYSLOG_IDENTIFIER configuration parameter
        Use this configuration parameter to choose the identifier name to be used in syslog messages.
      - ADT_SYSLOG_OPTIONS configuration parameter
        Use this configuration parameter to specify options to openlog().
      - ADT_SYSLOG_PRIORITY configuration parameter
        Use this configuration parameter to specify a priority while filtering messages in the syslog daemon.

ADT_SYSLOG_PRIORITY configuration parameter

Use this configuration parameter to specify a priority while filtering messages in the syslog daemon. The parameter is written in the configuration file and on the command line with commas separating separate options and no spaces.

default value

LOG_INFO

range of values

LOG_INFO(the default), LOG_EMERG, LOG_ALERT, LOG_CRIT, LOG_ERR, LOG_WARNING, LOG_NOTICE, LOG_DEBUG

takes effect

When onaudit is run with -P option, it sets the ADT_SYSLOG_PRIORITY parameter in the audit configuration file.

utility

onaudit (onaudit -P priority)

Use of more urgent priority such as LOG_EMERG is not recommended.

The priority can be written with or without the LOG_ prefix and in upper-case or lower-case or mixed case. The LOG_ prefix and all upper-case is used when options are written to the audit configuration file.