Safeguard Reference Manual (G06.24+, H06.03+ )

Disk Volume and Subvolume Security Commands
Safeguard Reference Manual—520618-013
9-10
ADD VOLUME and SUBVOLUME Commands
For a description of each audit-spec, see the SET VOLUME and
SUBVOLUME Commands on page 9-26. Omitting audit-spec specifies
NONE.
AUDIT-MANAGE-FAIL [audit-spec]
changes the audit-spec for unsuccessful attempts to manage a volume or
subvolume authorization record. The form of audit-spec is:
{ ALL | LOCAL | REMOTE | NONE }
For a description of each audit-spec, see the SET VOLUME and
SUBVOLUME Commands on page 9-26. Omitting audit-spec specifies
NONE.
WARNING-MODE { ON | OFF }
defines whether warning mode is enabled for the specified volume or
subvolume. The value is required. For more information on warning mode, see
the Safeguard Administrator's Manual.
ON enables warning mode for the specified volume or subvolume. The initial
value is OFF, which disables warning mode for the specified volume or
subvolume.
Considerations
•
Volume and subvolume security can be managed from remote nodes.
By default, only a local super group user can add an authorization record for a
volume, and only a local user can add an authorization record for a subvolume.
However, when a user adds an authorization record for a volume or subvolume,
the user can specify the owner (through the OWNER attribute) as a network user
ID. A network user who owns a volume or subvolume authorization record can
manage the Safeguard access controls from a remote node.
•
Attributes in an ADD command affect only the record added.
Any attribute specifications in an ADD VOLUME or ADD SUBVOLUME command
affect only the authorization record being created and do not change the current
default attribute values. This condition is also true for a LIKE clause in an ADD
command.
Examples
1. Using a LIKE clause is a convenient way to add a new volume or subvolume
authorization record that has the same attribute values as those defined for
another volume or subvolume. For example, this command adds an authorization
record for the volume $DATA1 with the same attribute values as those currently
defined for $DATA2:
=ADD VOLUME $data1, LIKE $data2