Reference Guide

Table Of Contents
Qualifier Description
-fs
Specify the file system by name.
-o, --outpath Specify the target directory. If the directory does not exist, it is created.
Manage Dynamic Access Control (svc_nas nas_svc_dac)
This script enables you to manage Microsoft Dynamic Access Control (DAC), which allows you to establish access rules.
Usage
Function System Operations
Mode Service
Usage Service
Requires service user password? Yes
Requires root privileges? No
May cause data unavailability? Yes
May cause data loss? No
Scope Node
Prerequisites None
Format
svc_nas nas_svc_dac [-h] [-e {ALL}] [-d {ALL}] [-s {ALL}] [--cap-staging-enable
<system name>] [cap-staging-disable <system name>] [-v <level>] [-i system name {--
dn <distinguished policy name>}] [-p <compname> --dn <policy_dn>] [-v] [--delete] [--
add-recovery-rule <system name> --rule-name rule name {--resource-condition <resource
condition>} {--effective-security <effective_security>}] [--delete-recovery-rule <system
name> --rule-name <rule name> {--resource-condition <resource condition>} {--effective-
security <effective_security>}]
Optional arguments
Qualifier
Description
-h, --help Show the help message and exit.
-e, --enable Enable DAC on the system VDM. You must specify ALL.
-d, --disable Disable DAC on the system VDM. You must specify ALL.
-s, --state Show the current state of DAC on the system VDM. You
must specify ALL.
--cap-staging-enable
Enable evaluation of proposed permissions for the system
VDM.
--cap-staging-disable
Disable evaluation of proposed permissions for the system
VDM. This setting is the default.
-v, --verbosity Set the level for log messages associated with the system
VDM. Specifying a dbg2 or dbg3 level reduces system
performance.
-i, --info Show details of all policies in the policy manager.
Service Commands 49