Safeguard Reference Manual (G06.29+, H06.08+, J06.03+)

Event-Exit-Process Commands
Safeguard Reference Manual — 520618-030
15 - 7
ALTER EVENT-EXIT-PROCESS Command
exit-attribute
specifies the name of the event-exit attribute to be changed. The exit-
attributes are:
ENABLED { ON | OFF }
RESPONSE-TIMEOUT [ n [ SECONDS ] ]
TIMEOUT-ALL-AUTHZREQ { ON | OFF }
ENABLE-AUTHENTICATION-EVENT { ON | OFF }
ENABLE-AUTHORIZATION-EVENT { ON | OFF }
ENABLE-PASSWORD-EVENT { ON | OFF }
PROG [ prog-filename ]
LIB [ lib-filename ]
SWAP [ $vol [ subvol.filename ] ]
PNAME [ process-name ]
CPU [ cpu-number | ANY ]
PRI [ priority ]
PARAM-TEXT [ startup-param-text ]
ENABLED { ON | OFF }
defines whether the security event exit is enabled. ON indicates that the event
exit is enabled and that the Safeguard software is to start the event-exit
process and send designated security event messages to the process. If
another process with the same name is running when the event-exit process is
enabled, Safeguard kills that process before starting the event-exit process.
OFF indicates that the Safeguard software is not to start the exit process. If the
event-exit process is running when this attribute is set to OFF, the Safeguard
software stops the process.
The PROG object file must be specified before (or in the same command)
ENABLED is set to ON.
The default value is OFF.
RESPONSE-TIMEOUT [ n [ SECONDS ] ]
specifies the number of seconds, from 1 through 900, that the Safeguard
sof
tware is to wait for the event-exit process to respond to an event.
If a timeout occurs and the request is for a password-quality or authorization
event from an undeniable user, the event proceeds with the check performed
by the Safeguard software. Locally authenticated super-group members are
undeniable users. All other users are considered deniable users.
If a timeout occurs and the request is for a p
assword-quality event from a
deniable user, the request is denied.
If a timeout occurs when the attribute TIMEOUT
-ALL-AUTHZREQ is set to ON,
and the request is for an authorization event from a deniable user, then the
request is denied. If the attribute TIMEOUT-ALL-AUTHZREQ is set to OFF,
then the deniable user waits indefinitely with neither approval nor denial.