Safeguard User's Guide (G06.24+, H06.03+)

Working with Patterns
Safeguard User’s Guide—422089-009
9-6
Safeguard Pattern Configuration
required only authentication services. The use of ONLY is not recommended for
installations that have a substantial number of non-pattern protection records.
In order to avoid operational issues for installations that do have non-pattern protection
records, HP recommends you backup the SAFE.GUARD files, set the configuration to
FIRST, add pattern protection records and delete non-pattern protection records,
examine the audit trail, and when no accesses have been determined by non-patterns,
change the configuration to ONLY.
When ONLY is specified, you should limit use of ADD, ALTER, DELETE, FREEZE, or
THAW DISKFILE, SUBVOL, and VOLUME commands. This will preserve the content
of the SAFE.GUARD files. If the recommended approach is used, then the
SAFE.GUARD files will continue to be empty.
To fall back from ONLY, HP recommends you set the configuration to LAST, add
VOLUME, SUBVOL, and DISKFILE protection records, examine the audit trail, and
when no accesses have been determined by patterns, change the configuration to
OFF. Alternatively, the configuration can change from ONLY to FIRST or LAST rather
than OFF, depending upon the user requirements for mixing patterns and non-patterns.
The following table describes CHECK-DISKFILE-PATTERN settings. The 2 columns
Normal and Pattern indicate intermediate results returned from lookups of normal and
pattern protection records. The columns OFF, FIRST, LAST, and ONLY indicate the
final outcome after considering both outcomes from normal and pattern lookups, based
on the CHECK-DISKFILE-PATTERN setting.