Safeguard Reference Manual (G06.24+, H06.03+ )

Device and Subdevice Security Commands
Safeguard Reference Manual—520618-013
10-10
ALTER DEVICE and SUBDEVICE Commands
Example
You can use a LIKE device-name clause to define all the attribute values for a device
and then change any of those values by specifying one or more attribute values after
the LIKE attribute. For example, this command adds an authorization record for $LP2
that has the same device attribute values (and ACL) as $LP1 except for the OWNER
attribute:
=ADD DEVICE $lp2, LIKE $lp1, OWNER super.bob
ALTER DEVICE and SUBDEVICE Commands
ALTER DEVICE or SUBDEVICE changes one or more attribute values in an
authorization record.
An owner of a device, the primary owner’s group manager, and the super ID can alter
a device authorization record. Similarly, an owner of a subdevice’s authorization
record, the primary owner’s group manager, and the super ID can alter a subdevice
authorization record.
Except for the ACCESS attribute, new attribute values specified in an ALTER DEVICE
or SUBDEVICE command replace the existing attribute values with the specified
values. Using ALTER DEVICE or SUBDEVICE to specify a new ACCESS access-
spec adds the new access-spec to the existing ACL. To remove authorities
previously granted to users, use the minus-sign (-) form of access-spec.
device-list
specifies one or more devices for which authorization records are to be changed.
All devices specified must already have Safeguard authorization records (created
through the ADD DEVICE command). device-list can be either:
device-name
( device-name [ , device-name ] ... )
device-name
can be any device name. The name can contain wild-card characters.
ALTER DEVICE device-list [ , ]
{ LIKE device-name | device-attribute }
[ , device-attribute ] ...
ALTER SUBDEVICE subdevice-list [ , ]
{ LIKE subdevice-name | device-attribute }
[ , device-attribute ] ...