Safeguard Reference Manual (G06.24+, H06.03+ )

Disk-File Security Commands
Safeguard Reference Manual—520618-013
8-37
FREEZE DISKFILE Command
ALL
instructs SAFEGUARD to use all the wildcard characters as a part of a search
string, not as part of the pattern.
Consideration
•
Deleting a diskfile-pattern authorization record places all files described by that
pattern, that are not described by another pattern, under standard Guardian
security.
When you delete a diskfile-pattern authorization record, the disk files that are no
longer described by diskfile patterns are subject to Safeguard authorization checks
and auditing. All subsequent accesses to the diskfiles are subject to standard
Guardian disk-file security checks.
When the Safeguard software deletes a diskfile pattern authorization record, the
security-string for the files not protected by Safeguard are reset to the original
value. (That is, the files receive the security it had before being added to
Safeguard protection.)
Examples
1. To delete the diskfile pattern $ABC.*.*:
DELETE DISKFILE-PATTERN $ABC.*.*
2. To delete all diskfile patterns that match the search pattern $ABC.*.*:
DELETE DISKFILE-PATTERN $ABC.*.*, ALL
3. To delete all diskfile patterns that match the search pattern $AB*.D*.*F
DELETE DISKFILE-PATTERN $AB*.D*.*F, ALL
FREEZE DISKFILE Command
FREEZE DISKFILE temporarily suspends the access authorities granted to users on a
disk-file ACL. While a disk file is frozen, only the file owner, an owner on the ACL, the
primary owner’s group manager, and the local super ID can access the file. Any other
users get a security violation error (file error 48).
An owner of a disk file, the primary owner’s group manager, and the super ID can
freeze a disk file.
Use THAW DISKFILE to restore all the access authorities that were in effect before the
file was frozen.
FREEZE DISKFILE filename-list [ [ , ] WHERE option-list ]