Safeguard Reference Manual (G06.24+, H06.03+ )

Security Group Commands

Safeguard Reference Manual—520618-013

13-26

SHOW SECURITY-GROUP Command

The SHOW SECURITY-GROUP report displays these attribute values:

OWNER gn,un

is the group number and member number of the user who will own this security

group authorization record.

AUDIT-ACCESS-PASS = a-spec AUDIT-MANAGE-PASS = a-spec

AUDIT-ACCESS-FAIL = a-spec AUDIT-MANAGE-FAIL = a-spec

are the conditions under which the Safeguard software will audit attempts to

execute restricted commands and attempts to manage this authorization record.

For more information about these fields for audit-spec, see the SET SECURITY-

GROUP Command on page 13-20.

user-spec [DENY] authority-list

is a current default ACL entry for the security group. For a full description, see

INFO SECURITY-GROUP Brief Report on page 13-15.

[ NO ACCESS CONTROL LIST DEFINED! ]

specifies no default ACL entries are defined. Use SET SECURITY-GROUP. . .

ACCESS to define default ACL entries. You can use ADD SECURITY-GROUP. . .

ACCESS to define ACL entries when you create a security group-authorization

record.

Example

This SHOW SECURITY-GROUP report displays the current default security group

attribute values. To display the report:

=SHOW SECURITY-GROUP

Figure 13-3. SHOW SECURITY-GROUP Report Format

TYPE OWNER

SECURITY-GROUP gn,un

AUDIT-ACCESS-PASS = a-spec AUDIT-MANAGE-PASS = a-spec

AUDIT-ACCESS-FAIL = a-spec AUDIT-MANAGE-FAIL = a-spec

user-spec [DENY] authority-list

. . .

[ NO ACCESS CONTROL LIST DEFINED! ]

Caution. If you do not specify an ACL for a security group, only the local super ID can execute

commands restricted to that security group.