Safeguard Reference Manual (G06.29+, H06.08+, J06.03+)

Safeguard Subsystem Commands
Safeguard Reference Manual — 520618-030
16 - 14
ALTER SAFEGUARD Command
ACL-REQUIRED-DISKFILE { ON | OFF }
defines whether the absence of an ACL for a volume, subvolume, or disk file
causes the denial of access to that volume, subvolume, or disk file. The initial
value is OFF. (The absence of a Safeguard protection record reverts operation
to Guardian rules.)
CLEARONPURGE-DISKFILE { ON | OFF }
defines whether all disk files act as if the CLEARONPURGE file attribute had
been set. The initial value is OFF. (Disk files are purged according to their
individual CLEARONPURGE file attributes.) When CLEARONPURGE-
DISKFILE is set to ON, all disk files act as if the CLEARONPURGE file
attribute had been set.
The following considerations apply to the CLEARONPURGE-DISKFILE
attribute:
•
CLEARONPURGE is a waited operation because the DiscProcess (DP2)
writes zeros to all allocated extents before returning to the purge
application. DP2 might take up to a minute to execute CLEARONPURGE
for a 30 megabyte file.
•
Disk files include Safeguard Audit files, TMF Audit files, Event log files,
Temporary disc files, and so on.
•
$TMP creates and purges Audit trails.
•
$TMP stalls if the CLEARONPURGE-DISKFILE is ON while purging an
audit trail, because $TMP waits until DP2 finishes CLEARONPURGE
operations. Begin, Abort, and End transactions also stall while $TMP is
stalled.
AUDIT-AUTHENTICATE-PASS [ LOCAL | REMOTE | ALL | NONE ]
defines additional auditing for successful authentication attempt
s for users and
aliases. This setting supplements the audit settings in user or alias
authentication records. The default value is NONE. (Auditing is selected by the
individual audit settings.)
The conditions specified for this attribute also apply to the systemwide auditing
of automatic logoffs described in the Safeguard Audit Service Manual.
AUDIT-AUTHENTICATE-FAIL [ LOCAL | REMOTE | ALL | NONE ]
defines additional auditing for unsuccessful authentication attempt
s for users
and aliases. This setting supplements the audit settings in user or alias
authentication records. The default value is NONE. (Auditing is selected by the
individual audit settings.)