Safeguard Reference Manual (G06.24+, H06.03+ )

Device and Subdevice Security Commands
Safeguard Reference Manual—520618-013
10-15
ALTER DEVICE and SUBDEVICE Commands
For a description of the audit-specs, see the SET DEVICE and
SUBDEVICE Commands on page 10-25. Omitting audit-spec specifies
NONE.
WHERE WARNING-MODE
specifies that only devices or subdevices in filename-list that have
WARNING-MODE set are to be deleted.
WARNING-MODE { ON | OFF }
defines whether warning mode is enabled for the specified device or
subdevice. The value is required. For more information on warning mode, see
the Safeguard Administrator's Manual.
ON enables warning mode for the specified device or subdevice. The initial
value is OFF, which disables warning mode for the specified device or
subdevice.
Consideration
Using ALTER DEVICE or SUBDEVICE to change one or more attributes for a device
or subdevice has no effect on any processes that currently have the device or
subdevice open.
For example, if you change an ACL to deny both READ and WRITE authority to a user
who is running a process that is currently accessing the device or subdevice, the
user’s process continues accessing the device or subdevice until it closes the device.
Then any attempt to reopen the device or subdevice results in a security violation error
(file error 48).
Example
The owner of the tape drive $TAPE enters an ALTER DEVICE command to change the
ACL for $TAPE. Afterward, user PRS.HARRY (user ID 86,2) can no longer read from
or write to $TAPE, and the network user ID 33,13 can both read from and write to
$TAPE.
To verify the current device status:
=INFO DEVICE $TAPE