Audit trail administration : UNIX SVR4.2 MP - Modig, Mark (Prentice Hall, 1993)