Safeguard Reference Manual (G06.29+, H06.08+, J06.03+)

Introduction
Safeguard Reference Manual — 520618-030
1 - 11
Who Can Use SAFECOM Commands
The following components reside on every system where the Safeguard software has
been installed:
•
The subject database, which contains a user-authentication record for every user
authorized to use the system.
•
The object database, which contains an object authorization record for every disk
file, disk volume, disk subvolume, device, process name, and OBJECTTYPE
protected by the Safeguard facility.
•
The Security Manager Process (SMP), which runs under the process name
$ZSMP and is responsible for managing all changes to the subject and object
databases. The SMP also verifies that the name and password supplied by the
user match a user name and associated password stored in the subject database.
•
SAFECOM, which is the command interpreter that provides an interactive interface
to the SMP.
•
The Security Monitor (SMON), which authorizes all attempts to access protected
objects. A separate SMON process runs in every CPU in a protected system. Each
SMON performs authorization operations for all security-related transactions in that
CPU. The SMP ensures that all SMONs are operational.
•
The Safeguard Helper Process (SHP), which assists SMP to identify and update
process attributes whenever the following user attributes in the user database files
are modified:
°
AUDIT-USER-ACTION-PASS
°
AUDIT-USER-ACTION-FAIL
°
Primary group
°
Supplementary group list
°
Group count
A separate SHP process runs in every processor in a protected system. Each SHP
updates the process attributes of every process in it
s own processor running with the
user identity whose above-mentioned user attributes are changed.
Who Can Use SAFECOM Commands
Only users who have EXECUTE authority for the SAFECOM program object disk file
can run SAFECOM. By creating an access control list for the SAFECOM object file, a
security administrator can restrict EXECUTE authority for the SAFECOM program to a
few users or to a single user.
The Safeguard software also limit
s who can execute certain SAFECOM commands.
For example, some restrictions are placed on the ADD command, which creates a
Note. The SMP ensures that all SHPs are operational.