Safeguard Reference Manual (G06.29+, H06.08+, J06.03+)

Process and Subprocess Security Commands
Safeguard Reference Manual — 520618-030
11 - 3 5
SET PROCESS and SUBPROCESS Commands
NONE
No unsuccessful management attempts are audited.
Omitting audit-spec specifies NONE.
WARNING-MODE { ON | OFF }
defines whether warning mode is enabled for the specified process or
subprocess. The value is required. For more information on warning mode, see
the Safeguard Administrator's Manual.
ON enables warning mode for the specified process or subprocess. The initial
value is OFF, which disables warning mode for the specified process or
subprocess.
Example
User PRS.HARRY (with user ID 86,2) enters the following SET PROCESS commands
to specify default ACL entries and audit specifications before creating a process name
authorization record with ADD PROCESS:
=ASSUME PROCESS
=SET OWNER 86,2
=SET ACCESS 86,2 (r,w,p,c) ; 86,1 DENY c; 86,* (r,w,c)
=SET ACCESS 33,255 (r,w,c)
=SET AUDIT-ACCESS-PASS all , AUDIT-ACCESS-FAIL local
=SHOW
This report shows:
These SET PROCESS commands specify:
•
The owner of the process name authorization record is user ID 86,2
(PRS.HARRY).
•
PRS.HARRY has all four access authorities (READ, WRITE, CREATE, and
PURGE).
•
User ID 86,1 is denied CREATE authority to the process name.
•
All members of group 86 (excluding users 86,2 and 86,1) have READ, WRITE, and
CREATE access authorities.
TYPE OWNER WARNING-MODE
PROCESS 86,2 OFF
OBJECT-TEXT-DESCRIPTION =
AUDIT-ACCESS-PASS = ALL AUDIT-MANAGE-PASS = NONE
AUDIT-ACCESS-FAIL = LOCAL AUDIT-MANAGE-FAIL = NONE
033,255 R,W, C
086,001 DENY C
086,002 R,W, P,C
086,* R,W, C