Safeguard Reference Manual (G06.29+, H06.08+, J06.03+)

Disk-File Security Commands
Safeguard Reference Manual — 520618-030
8 - 66
SET DISKFILE Command
TRUST {ME|SHARED|OFF}
establishes the current default setting of the TRUST attribute for a program
object file. This attribute is valid only on systems running H-series RVUs. Only
the super ID can set this attribute.
ME
specifies that the program can be trusted to not access the buffers private
to the process before I/O completion.
SHARED
specifies that the program can be trusted to not access the buffers that are
private to the process or are shared with another process that also has
TRUST SHARED set, before I/O completion.
OFF
specifies that the program is not to be trusted.
PRIV-LOGON { ON | OFF }
establishes whether the program file (object disk file) can request additional
logon related sensitive features. The conditions can be ON or OFF. The default
is OFF.
ON
a process created from this program file can request a logon without
specifying a password.
A process originated from a program file calling USER_AUTHENTICATE_ with
a 2 and 15 bit set to ON, the requesting user for authentication need not give a
password. Even with wrong password the user will be able to logon
successfully as bit 2 and 15 in the options field. In case of only bit 2 set to 1
and bit 15 as 0; no fail delay will take place. That is, no failure delay will be
imposed even after three attempts with wrong password. The authentication
will not be successful but there will be no delay imposed.
Also establishes whether the program file (object disk file) can requ
est a delay
to be imposed for failed logon attempts. The conditions can be ON or OFF. The
default is OFF.
ON
a process created from this program file is not subjected to logon failure
delays.
PRIV-LOGON may also be used in the WHERE expression of a command to
restrict scope of that command to files with PRIV-LOGON ON.