Safeguard Reference Manual (G06.24+, H06.03+ )

Device and Subdevice Security Commands
Safeguard Reference Manual—520618-013
10-3
Device and Subdevice Security Command Summary
\*.4,*, or \*.*,*. Otherwise, the open request is rejected with a security violation error
(file error 48).
An open request that has passed the Safeguard authorization check can nevertheless
fail. For example, if a process attempts to open a device or subdevice already opened
by another process that has exclusive access, the second open attempt fails with file
error 12 (file in use). (For more information, see the System Procedure Calls
Reference Manual.)
Device and Subdevice Security Command
Summary
Table 10-1 lists the device and subdevice security commands and gives a brief
description of each.
Table 10-1. Device and Subdevice Security Command Summary (page1of2)
Command Description
ADD [SUB]DEVICE Adds a device or subdevice authorization record with the
specified device or subdevice attribute values. The current
default device or subdevice attribute values are used for any
attributes not specified in the ADD DEVICE or ADD
SUBDEVICE command. (Only a local super-group user can add
an authorization record for a device or subdevice unless
otherwise specified by the OBJECTTYPE DEVICE or
OBJECTTYPE SUBDEVICE ACL.)
ALTER [SUB]DEVICE Changes one or more attribute values in a device or subdevice
authorization record. For all attributes except ACCESS, ALTER
DEVICE or SUBDEVICE replaces the current value with the
specified value. For the ACCESS attribute, ALTER DEVICE or
SUBDEVICE changes the existing ACL to incorporate access-
spec.
DELETE [SUB]DEVICE Deletes a device or subdevice authorization record. Afterward,
requests to open the device or subdevice are no longer subject
to Safeguard authorization checks or auditing.
FREEZE [SUB]DEVICE Temporarily suspends the access authorities granted to users in
a device or subdevice ACL. (Only the owner of an authorization
record for a device or subdevice, the owner’s group manager,
and the local super ID can access a frozen device or subdevice.)
INFO [SUB]DEVICE Displays the existing attribute values in a device or subdevice
authorization record.
RESET [SUB]DEVICE Sets one or more default device or subdevice attribute values to
predefined values.