Safeguard Reference Manual (G06.24+, H06.03+ )

Event-Exit-Process Commands
Safeguard Reference Manual—520618-013
15-3
ADD EVENT-EXIT-PROCESS Command
PRI [ priority ]
PARAM-TEXT [ startup-param-text ]
ENABLED { ON | OFF }
defines whether the security event exit is enabled. ON indicates that the event
exit is enabled and that the Safeguard software is to start the event-exit
process and send designated security event messages to the process. If
another process with the same name is running when the event-exit process is
enabled, Safeguard kills that process before starting the event-exit process.
OFF indicates that the Safeguard software is not to start the event-exit
process.
The PROG object file must be specified before (or in the same command)
ENABLED is set to ON.
The default value is OFF. If you omit this attribute, it is set to the default value.
RESPONSE-TIMEOUT [ n [ SECONDS ] ]
specifies the number of seconds, from 1 through 900, that the Safeguard
software is to wait for the event-exit process to respond to an event.
If a timeout occurs and the request is for a password-quality or authorization
event from an undeniable user, the event proceeds with the check performed
by the Safeguard software. Locally authenticated super-group members are
undeniable users. All other users are considered deniable users.
If a timeout occurs and the request is for a password-quality event from a
deniable user, the request is denied.
If a timeout occurs and the request is for a authorization event from a deniable
user, the user waits indefinitely with no approval or denial.
If a timeout occurs and the request is for authentication by any user, the
request is denied.
The default value is five seconds. If you omit this attribute, it is set to the
default value.
ENABLE-AUTHENTICATION-EVENT { ON | OFF }
specifies whether authentication events are to be sent to the event-exit
process. ON indicates that the events are sent to the event-exit process when
it is enabled. For a complete list of events sent when ENABLE-
AUTHENTICATION-EVENT is ON, see Design Considerations on page 15-24.
For more information, see ENABLE-PASSWORD-EVENT { ON | OFF } on
page 15-4.
The default value is OFF. If you omit this attribute, it is set to the default value.