Safeguard Reference Manual (G06.24+, H06.03+ )

Process and Subprocess Security Commands
Safeguard Reference Manual—520618-013
11-6
Syntax of the Process and Subprocess Security
Commands
Syntax of the Process and Subprocess
Security Commands
The rest of this section contains individual syntax descriptions for the SAFECOM
process and subprocess security commands. Commands are presented in alphabetical
order, and most command descriptions contain these elements:
•
A summary of the functions performed by the command, including any restrictions
on who can use the command
•
The syntax of the command, including descriptions of the command parameters
and variables
•
The format for the command listing or report (for commands that produce listings
or reports)
•
Considerations for the use of the command
•
Examples of command usage
ADD PROCESS and SUBPROCESS Commands
ADD PROCESS or SUBPROCESS creates a Safeguard authorization record for one
or more process names. After a process name authorization record is created, the
access control attributes defined for the process name apply to every process that runs
under the protected name. All attempts to create or stop a process with the protected
name or to open a process or subprocess running under the protected name are
subject to Safeguard authorization checks and, optionally, to Safeguard auditing.
Any local user can add a process name authorization record unless it is modified by
OBJECTTYPE PROCESS or SUBPROCESS. For more information, see Section 12,
OBJECTTYPE Security Commands.
You can use the SET PROCESS or SUBPROCESS command to establish default
values for the process or subprocess attributes. You can then use ADD PROCESS or
SET [SUB]PROCESS Sets one or more default values for the process attributes to
specified values. When a process name authorization record
is added, the current default values for the process or
subprocess attribute values are used for any attributes not
specified in the ADD PROCESS or ADD SUBPROCESS
command.
SHOW [SUB]PROCESS Displays the current default values for the process or
subprocess attributes.
THAW [SUB]PROCESS Restores the access authorities granted to users in the ACL
defined for a frozen process name.
Table 11-1. Process and Subprocess Security Command Summary (page 2 of 2)
Command Description