Safeguard Administrator's Manual (G06.24+, H06.03+)
Table Of Contents
- What’s New in This Manual
- About This Manual
- 1 Introduction
- 2 Controlling User Access
- Introduction
- Using SAFECOM to Establish a Local User Community
- Using SAFECOM to Manage User Access to Your System
- Changing the Owner of a User Authentication Record
- Granting a User Temporary Access to Your System
- Requiring Users to Change Their Passwords
- Granting a Grace Period for Changing an Expired Password
- Forcing Immediate Expiration of a User’s Password
- Freezing a User's Ability to Access the System
- Specifying Auditing for a User ID
- Deleting Users
- Deleting Administrative Groups
- Using SAFECOM to Establish a Network of Users
- Using Safeguard With Nodes With Standard Security
- Identifying Network Users
- Granting a Network User Access to Objects on Your System
- Establishing a Community of Network Users
- Changes to the PAID During a User’s Session
- Additional Considerations for Aliases and Groups
- Additional Considerations for ACCESS with Network Specific Subject IDs
- Establishing Default Protection for a User's Disk Files
- Specifying a Default Command Interpreter for a User
- Establishing Guardian Defaults
- Assigning an Alias to a User
- 3 Managing User Groups
- 4 Securing Volumes and Devices
- 5 OBJECTTYPE Control
- 6 Managing Security Groups
- 7 Securing Terminals
- 8 Warning Mode
- 9 Configuration
- Safeguard Attributes
- Configuring User Authentication
- Configuring Password Control
- Configuring Device Control
- Configuring Process Control
- Configuring Disk-File Control
- Configuring Safeguard Auditing
- Configuring a Default Command Interpreter
- Configuring Communication With $CMON
- Configuring Logon Dialog
- Configuring Exclusive Access at Safeguard Terminals
- Configuring Warning Mode
- Configuring Persistence
- Configuring Attributes for Node Specific Subjects in ACLs
- 10 Installation and Management
- Safeguard Components
- Process Considerations for the SMP and SAFECOM
- Safeguard Subsystem Management Commands
- General Installation Procedure
- Installing the Safeguard Software
- Starting the SMP
- Converting to the Safeguard Subsystem
- Updating the Safeguard Software
- Guidelines for Securing the Safeguard Subsystem
- Monitoring the Safeguard Subsystem
- A SAFECOM Command Syntax
- Index
Installation and Management
Safeguard Administrator’s Manual—523317-013
10-4
Safeguard Subsystem Management Commands
Safeguard Subsystem Management
Commands
The Safeguard subsystem management commands are entered through SAFECOM.
Table 10-1 on page 10-4 described them briefly. The syntax of these commands is
described in detail in the Safeguard Reference Manual. The procedures you use to
install and monitor the Safeguard software are described later in this section.
General Installation Procedure
These general steps are required to set up and manage the Safeguard subsystem:
1. Install the Safeguard software. Choose the appropriate method, described in
Installing the Safeguard Software on page 10-5.
2. Start the SMP process. If the Safeguard software is not installed to start
automatically, you must start it manually, as described in Starting the SMP
on
page 10-7.
3. Configure the Safeguard subsystem and set up basic access control lists to secure
sensitive components of your system. For more information, see Guidelines for
Securing the Safeguard Subsystem on page 10-11.
4. Monitor the status of your system, as described in Monitoring the Safeguard
Subsystem on page 10-12.
Table 10-1. Safeguard Subsystem Management Commands
Command Description
ALTER SAFEGUARD Changes one or more Safeguard configuration attributes. For
more information, see Section 9, Configuration
.
INFO SAFEGUARD Displays the configurable Safeguard attributes. For more
information, see Section 9, Configuration
.
START [ SAFEGUARD ] No longer functional. However, SAFECOM still accepts the
command for compatibility with previous product versions.
When the SMP is started, it automatically starts the SMON
processes. For more information, see Starting the SMP
on
page 10-7.
STOP [ SAFEGUARD ] Stops all the SMON and SMP processes.