Safeguard User's Guide (G06.24+, H06.03+)

Safeguard User’s Guide—422089-009
3-1
3 Securing Disk Files
This section acquaints you with the process of securing disk files with the Safeguard
subsystem. When you secure a disk file, you can:
•
Specify an access control list and the associated access authorities
•
Temporarily freeze an access control list so users on the list cannot access the file
•
Thaw the access control list so users on the list can once again access the file
•
Specify auditing conditions for the file
•
Give control of the file to someone else (change or share ownership)
•
Retain an authorization record for a disk file if that file is purged
•
Set special security features for disk files that contain program object code
•
Erase the data stored in a disk file when the file is purged
Normally, the PURGE command releases the space allocated for the file but does
not erase the data.
You can also use diskfile patterns to secure disk files. For more information, see
Section 9, Working with Patterns.
Table 3-1 lists the SAFECOM disk-file commands. The examples in this section
illustrate the use of these commands. For the detailed syntax of the disk-file security
commands, see the Safeguard Reference Manual.
Table 3-1. Disk-File Commands (page 1 of 2)
Command Action
ADD DISKFILE Adds a disk file to the Safeguard database by creating an
authorization record for the file.
ALTER DISKFILE Changes one or more of the security attributes in the disk-file
authorization record.
DELETE DISKFILE Removes a disk file from the Safeguard database by deleting
the disk-file authorization record. The disk file is returned to
Guardian protection.
FREEZE DISKFILE Suspends access authority to a disk file. No one except an
owner, the primary owner's group manager, and the super ID
can gain access to the frozen file.
INFO DISKFILE Displays the security attributes of the disk-file authorization
record.
RESET DISKFILE Resets one or more default disk-file attributes to values
predefined by the Safeguard software. Any subsequent ADD
DISKFILE commands use these predefined defaults for
attributes not specified in the ADD DISKFILE command.