Safeguard User's Guide (G06.24+, H06.03+)

Securing Disk Files
Safeguard User’s Guide—422089-009
3-16
The LICENSE Attribute
The PERSISTENT attribute is set to ON, and user 2,18 can create this file with the
same access control list if it is purged.
The PERSISTENT attribute is associated with a file name. Because of this, persistent
protection is lost when you rename a file. The persistent protection record remains
associated with the original file name, which refers to a file that no longer exists.
The LICENSE Attribute
The LICENSE attribute applies only to disk files that contain object code.
Normally, only the super ID can run programs containing privileged code. By setting
the LICENSE attribute to ON, the super ID can license a file containing privileged code
so other users can run it. Only the super ID can license a file, but any owner of the file
can revoke the license.
You can use the special WHERE LICENSE option with most disk file commands to
select only licensed files. For example, the following command lists licensed files on
$DATA:
=INFO DISKFILE $data.*.*, WHERE LICENSE
You can also use the WHERE LICENSE option with the ALTER, DELETE, FREEZE,
and THAW commands.
The PROGID Attribute
The PROGID attribute applies only to disk files that contain object code.
The PROGID attribute is used to determine the process access ID (PAID) when a
program file is run as a process. When PROGID is set to ON, the PAID is set to the
user ID of the primary owner of the program file, thereby giving the program all the
privileges associated with the primary owner's ID. Only the primary owner can set
PROGID to ON. When PROGID is set to OFF, the PAID is set to the user ID of the user
running the program.
If the primary owner of a file is changed, PROGID is automatically set to OFF.
Assume that you have a program file called progfile, which is already protected by the
Safeguard software. As the primary owner, you issue the following command to set the
PROGID attribute to ON:
=ALTER DISKFILE progfile, PROGID ON
Note. If a file with persistent protection is purged, the PROGID and LICENSE attributes are
set to OFF.