Security Management Guide (G06.24+, H06.03+)

Concerns for the User
Security Management Guide—522283-008
5-12
Guardian Security
If your logon default security setting is restrictive (for example, OOOO, which limits
access to you alone), you must resecure a new file to make it accessible to others. By
using a restrictive security setting, you avoid the risk of forgetting to secure a sensitive
file.
TACL Default File Security Setting
When you log on, the TACL process started on your behalf gets its file-creation security
setting for your session from the default security setting assigned to your user ID.
Initially, your default security setting is assigned by the person who created your user
ID. To learn your default security setting, enter the USERS command with no
parameters. For example, this command shows that the user who entered the
command has a default security setting of OOOO, which restricts read, write, execute,
and purge access to the file owner:
11> USERS
GROUP . USER I.D. # SECURITY DEFAULT VOLUMEID
SALES .ROBIN 147,036 OOOO $ADM.ROBIN
By default, your logon default security setting propagates first to your TACL process,
then to processes started by your TACL process, and then to files created by such
processes.
To change the default security setting for your current session, use the VOLUME
command. For example, this command changes the default security setting for the
session to AOOO, which allows any local user to read the new files you create during
the current session.
12> VOLUME ,"AOOO"
To confirm the new default security setting, use the WHO command. For example, this
command shows that the preceding VOLUME command changed the default security
setting to AOOO:
13> WHO
Home terminal: $ROBIN.#C02
TACL process: \DART.$R100
Primary CPU: 5 (VLX)
Default Segment File: $ADM.#0332
Pages allocated: 40 Pages Maximum: 1024
Bytes Used: 73912 (3%) Bytes Maximum: 2097152
Current volume: $ADM.ROBINWK
Saved volume: $ADM.ROBIN
Userid: 147,36 Username: SALES.ROBIN Security: "AOOO"
To change your default security setting for future sessions, use the DEFAULT
command. For example, this command changes the default security for future sessions