OSF DCE Administration Guide--Core Components

DCE Application Administration
i (insert) Create new execution information.
I (Insert) Create new execution information for a server that runs as a privileged
user (for example, as root). Such operations also require the i
permission.
Use the acl object to view or modify ACLs. For example, use this operation to view the
ACL for the server execution container object on host silver:
dcecp> acl show /.:/hosts/silver/config/srvrexec
{user appl_admin criI}
{unauthenticated r}
{any_other r}
Because /.:/hosts/silver/config/srvrexec is a container, it also has an Initial Container
ACL and an Initial Object ACL. You can operate on these initial ACLs by using the -ic
and -io options to acl operations. Note that the Initial Container ACL has no effect
because currently, child containers do not exist under
/.:/hosts/hostname/config/srvrexec.
10.1.1.3.4 Permissions for Accessing Server Execution Information
Each server’s configuration information is protected by its own ACL. These ACLs can
prevent unauthorized principals from creating, changing, reading, or deleting server
configuration information, and from starting, stopping, enabling, and disabling servers.
Each ACL is named for the server execution information it protects and has a name like
the following:
/.../cellname/hosts/hostname/config/srvrexec/server_name
This ACL has the following permissions:
c (control) Modify the ACL
r (read) Read the server execution information
w (write) Modify the server execution information
s (stop) Stop the server
As an example, use the following operation to view the ACL for the server execution
information for the video_clip server on host silver:
dcecp> acl show /.:/hosts/silver/config/srvrexec/video_clip
{user appl_admin crws}
{unauthenticated r}
{any_other r}
This ACL takes its default values from the container’s Initial Object ACL. You can
operate on the Initial Object ACL by using the -io option to acl operations. The
following example shows the Initial Object ACL for the video_clip server:
124243 Tandem Computers Incorporated 10−7