Safeguard User's Guide (G06.24+, H06.03+)

Securing Disk Files
Safeguard User’s Guide—422089-009
3-18
Removing a File From Safeguard Control
•
TRUST SHARED specifies that the program can be trusted not to access buffers
private to the process, or shared with another process that also has TRUST
SHARED set, before I/O completion.
To set the TRUST attribute of the program file progfile used in the previous example:
=ALTER DISKFILE progfile, TRUST SHARED
To verify the setting:
=INFO DISK progfile, DET
Removing a File From Safeguard Control
The DELETE DISKFILE command removes a file from the Safeguard database by
deleting the authorization record for the file. DELETE DISKFILE does not purge the file
itself.
When you remove a file from the Safeguard database, the file is no longer subject to
Safeguard authorization checks and auditing. The file is returned to Guardian security,
and it receives the security settings it had before being added to the Safeguard
database. Only the primary owner of a file, the primary owner's group manager, the
super ID, and users with OWNER authority on the access control list can use DELETE
DISKFILE to remove a file from Safeguard protection.
When a file is removed from the Safeguard database, the user specified by the
OWNER attribute becomes the Guardian owner. Users who had OWNER authority on
the access control list no longer own the file.
Removing a disk file from the Safeguard database does not change the setting of the
CLEARONPURGE, LICENSE, or PROGID attributes. These settings remain in effect
with Guardian security.
You can remove more than one file at a time from the Safeguard database. For
example, to remove the files report1 and quarter1 from the Safeguard database:
DELETE DISKFILE (report1, quarter1)
The Safeguard software sends a message informing you that the files are returned to
Guardian protection.
LAST-MODIFIED OWNER STATUS WARNING-MODE
$DATA.SALES
PROGFILE 24JUL05, 11:38 5,5 THAWED OFF
005,005 R,W,E,P
004,* R,E
005,* R,W
AUDIT-ACCESS-PASS = NONE AUDIT-MANAGE-PASS = NONE
AUDIT-ACCESS-FAIL = NONE AUDIT-MANAGE-FAIL = NONE
LICENSE = OFF PROGID = ON CLEARONPURGE = OFF PERSISTENT = OFF
TRUST = SHARED