Safeguard Reference Manual (G06.24+, H06.03+ )

Safeguard Reference Manual—520618-013
15-1
15 Event-Exit-Process Commands
The event-exit-process commands allow a security administrator to configure and
manage the security event exit process.
A security event-exit process is a user-written process that is allowed to participate in
security policy enforcement. Depending on how the event-exit process is configured,
the Safeguard subsystem passes it requests for authorization, authentication, and
password changes. The event-exit process rules on the request and returns the ruling
to the Safeguard subsystem for interpretation and enforcement.
This section describes the commands used to configure the event-exit process,
provides design considerations for designing and writing an event-exit process, and
documents the interprocess messages exchanged between the Safeguard subsystem
and the event-exit process.
If you have defined a SECURITY-ADMINISTRATOR security group, only members of
that security group can use the ADD, ALTER, and DELETE EVENT-EXIT-PROCESS
commands. If you have not defined the SECURITY-ADMINISTRATOR group, any
super-group member can use these commands.
Any user can execute the INFO EVENT-EXIT-PROCESS command.
Event-Exit-Process Command Summary
Table 15-1 lists the event-exit-process commands and gives a brief description of each.
Syntax of Event-Exit-Process Commands
The remainder of this section describes each event-exit-process command in detail.
Commands are presented in alphabetical order, and descriptions contain these
elements:
•
A summary of the command’s function, including the restrictions on who can use
the command
Table 15-1. Event-Exit-Process Command Summary
Command Description
ADD EVENT-EXIT-
PROCESS
Adds an event-exit-process configuration record.
ALTER EVENT-EXIT-
PROCESS
Changes one or more attribute values of the event-exit process-
configuration.
DELETE EVENT-
EXIT-PROCESS
Deletes an event-exit-process configuration record.
INFO EVENT-EXIT-
PROCESS
Displays the existing attribute values defined for the event-exit-
process configuration.