J06.15 Release Version Update Compendium

2 Operating System
OSS Security Event-Exit Process (SEEP)
The J06.15 RVU provides support for a customer or partner Open System Services Security Event-Exit
Process (OSS SEEP) that participates in access-control decisions for OSS objects. An OSS SEEP
provides additional file-access authorization for Version 3 catalog filesets that are OSS
SEEP-protected. This capability increases the acceptability of OSS-based applications to security
auditors and improves OSS security manageability.
For information about OSS SEEP: configuration and management, fileset and OSS name server
attributes, audited SCF operations, and EMS events, see the Open System Services Management
and Operations Guide.
For information about OSS SEEP: management, access authorization and consultation, library and
system calls, design, restrictions, and programming considerations, see the Open System Services
Programmer’s Guide.
Migration Considerations
When migrating to the J06.15 RVU:
• No OSS application or configuration changes are required if OSS SEEP features are not used.
• The configuration records for existing filesets and corresponding OSS name servers in the
OSS Monitor database are automatically upgraded and the new OSS SEEP-related attributes
are set to default values.
• To use the new OSS SEEP features on OSS SEEP-protected filesets, customers must:
Install the OSS SEEP program◦
◦ Configure OSS SEEP
◦ Upgrade any Version 2 catalog filesets to Version 3 catalog filesets
Fallback Considerations
There are no OSS application or configuration changes required for a fallback to an RVU prior to
J06.15. The OSS SEEP-related attribute settings in the fileset and OSS name server configuration
records are ignored by the older RVU. The new OSS SEEP-related attributes are preserved in the
configuration database.
OSS Access to SMF Disks
The J06.15 RVU enhances the following OSS filesystem APIs to enable OSS applications to access
Guardian files on Storage Management Foundation (SMF) logical volumes:
• OSS filesystem APIs that currently operate on unstructured Guardian files by name on physical
disks (local or remote) now operate on Guardian files on SMF logical volumes (local or remote).
For remote access, the remote system must be running an RVU that supports OSS access to
SMF logical volumes.
• OSS file system APIs that operate on file descriptors of an open Guardian file on physical
disks (local or remote) now operate on file descriptors of open Guardian files on SMF logical
volumes (local or remote). For remote access, the remote system must be running an RVU that
supports OSS access to SMF logical volumes.
The following APIs are affected:
• access()
• chown()
8 Operating System