Safeguard Administrator's Manual (G06.29+, H06.08+, J06.03+)

Safeguard Administrator’s Manual—523317-029
7-1
7 Securing Terminals
This section explains how to add a terminal definition to the Safeguard database so
that the Safeguard software controls that terminal. When a terminal definition is added,
the Safeguard software can perform the following additional security functions at the
terminal:
•
Start a specific command interpreter automatically after the user is authenticated
•
Allow the user who is logged on at the terminal to have exclusive access to it
Terminal definitions can be added selectively for some or all the terminals on your
system. The Safeguard user authentication controls are enforced regardless of
whether or not the terminal is controlled by the Safeguard software.
Use the TERMINAL security commands to add and manage terminal definition
records. Except for the INFO TERMINAL command, use of the TERMINAL commands
is restricted to security group members. INFO TERMINAL can be executed by any
user. Table 7-1 lists the security groups and shows which TERMINAL commands can
be executed by group members. If you have not defined the SECURITY-
ADMINISTRATOR and SYSTEM-OPERATOR groups, any super-group member can
use the TERMINAL commands. (For more information about how to define security
groups, see Section 6, Managing Security Groups.)
Unlike SAFECOM commands for other objects, the TERMINAL commands do not
allow you to specify an access control list. If you want to specify an access control list
for a terminal, you must do so with DEVICE or SUBDEVICE commands, depending on
how terminals are named on your system.
Terminals controlled by the Safeguard software can be configured for exclusive
access. This feature ensures that any user who is logged on at a Safeguard terminal is
given exclusive access to that terminal until the user logs off. All other users are denied
access to the terminal during the authenticated user session. For more information on
the TERMINAL-EXCLUSIVE-ACCESS attribute, see Configuring Exclusive Access at
Safeguard Terminals on page 9-36.
Table 7-2
on page 7-2 summarizes the TERMINAL commands.
Table 7-1. Security Groups and TERMINAL Commands
Command
SECURITY-
ADMINISTRATOR
SYSTEM-
OPERATOR
ADD TERMINAL Yes No
ALTER TERMINAL Yes No
DELETE TERMINAL Yes No
FREEZE TERMINAL Yes Yes
INFO TERMINAL Yes Yes
THAW TERMINAL Yes Yes