Security Management Guide (G06.29+, H06.08+, J06.03+)

OSS System Security
Security Management Guide — 522283-021
4 - 11
Process Security Attributes
An OSS process can determine its process security attributes by using the function
calls listed in Table 4-3 on page 4-11. For more information about these functions, see
the Open System Services System Calls Reference Manual.
The effective user ID, effective group ID, and group list are used to determine if file
access is allowed. Other security attributes are also used to determine if an OSS
Table 4-3. OSS Process-Management Functions
OSS Function Description
cuserid() Gets the user name associated with the real user ID of the current
pro
cess
endgrent() Closes the group database
getegid() Gets the effective group ID of the calling process
geteuid() Gets the effective user ID of the calling process
getgid() Gets the real group ID of the calling process
getgrent() The functions getgrnam() and getgrgid() should be used instead of this
fun
ction to ensure portability to future systems
getgrgid() Gets group information from the group database
getgrnam() Gets group information from the group database
getgroups() Gets the group list of the current process
getlogin() Gets login name
getpgrp() Gets the process group ID of the calling process
getpid() Gets the OSS process ID
getppid() Gets the parent OSS process ID
getpgrp Gets the process group ID of the calling process
getpid() Gets the OSS process ID
getpwnam() Gets user attribute information from the user database
getpwuid() Gets user attribute information from the user database
getuid() Gets the real user ID of the calling process
setgid() Sets the group ID of the calling process
setgrent() Resets the group name key to get group information from the group
da
tabase
setpgid() Sets the process group ID for job control
setpwent() Resets the sequential key to the user database
setsid() Creates a new session and sets process group ID
setuid() Sets the user ID of the calling process
setreuid()
1
Sets the real and effective user IDs of the calling process
setregid()
1
Sets the real and effective group IDs of the calling process
1
The OSS functions, setreuid() and setregid(), are supported only on systems running G06.27 and later G-series
RVUs and H06.05 and later H-series RVUs.