Safeguard User's Guide (G06.24+, H06.03+)

Safeguard User’s Guide—422089-009
Glossary-1
Glossary
access control list. A list associated with an object that itemizes the subjects authorized to
access that object and shows the access authorities granted to each subject.
ACL. See access control list.
alias. An alternate name for logging on to the system.
attribute. A security characteristic assigned to an object to apply special protection to that
object. Examples are CLEARONPURGE and LICENSE.
audit. The Safeguard function that records attempts by subjects to access objects or gain
access to the system and attempts by subjects to manage object authorization records.
audit trail. A series of audit records used in tracing the origin of audited events.
authentication. The process of verifying the identity of a user.
authentication record. A type of record maintained by the Safeguard software to validate a
user's identity.
authority. An access privilege granted to a subject to access an object. Examples are
READ authority and WRITE authority.
authorization. A function performed by the Safeguard software to allow a subject access to
an object.
authorization record. A type of record maintained by the Safeguard software to determine
the subjects granted access to an object and the security attributes to be applied to the
object.
CLEARONPURGE attribute. A security attribute for disk files that causes null characters to
be written over a file's residue after the file is purged.
LICENSE attribute. A security attribute for disk files that licenses nonprivileged users to run
program files that contain privileged object code.
object. A system resource to which access is controlled by the Safeguard software.
Examples are volumes, subvolumes, disk files, diskfile patterns, devices, and
processes.
password. A character string associated with a user ID or user name and used to
authenticate a user's identity.
PERSISTENT attribute. A Safeguard security attribute for disk files that causes the
authorization record for a file to be retained if the file itself is purged.