XYGATE Access Control Reference Manual

XYGATE
®
Access Control Reference Manual
Appendix C: The ACACL File
XYPRO Technology Corporation 125 Proprietary and Confidential
ACL $SUPER
START_LOGGED_ON
!Ensure the segment of macros is there
INPUT "RUN $VIK.XAC575.X575 INSTALL"
!Start macro to record information
INPUT "XAC_RUN_MACRO -PLAIN -BREAK $VIK.XAC575.PRMPTMAC"
ALIAS_ALL_PROCESSES
ALIAS "O " ">OBEY "
ALIAS "OBEY " ">OBEY "
ALIAS "O$" ">OBEY $"
ALIAS "O\" ">OBEY \"
NULLNULLSTOP
VERIFYUSER $EVERYONE
BLANKPASSWORD
TRACKVOLUME
FC
FCPROMPT "> "
OPENSBYOBJECTS \*.$*.*.*
! *** NOTE ***
! If you want a banner to be displayed before the user or alias can log on
! to the TACL, add the line below to any one of the following basic TACLs.
!
! BANNER_CONNECT $vol.subvol.banfile
!
! Replace $vol.subvol.banfile with the name
! of the edit file that you have created that contains the text you want
! to display before logon.
COMMAND TACL-VISUAL-INSPECT
DESCRIPTION "Audited TACL for use with Visual Inspect"
USER GROUP,USER !the user must log on
ACL $EVERYONE
OBJECT $SYSTEM.SYSNN.TACL !TACL is the program
START_LOGGED_OFF !The user must enter userid/alias and
!password
! the following line is needed for Visual Inspect
INPUT "RUN $VIK.XAC575.SETVIIP"
INPUT "LOAD/KEEP 1/$VIK.XAC575.LOADXOA"
ALIAS_ALL_PROCESSES !Extend the ALIAS to all subordinate
!programs
ALIAS "OBEY " ">OBEY " !internal >OBEY command which audits
ALIAS "O$" ">OBEY $" !internal >OBEY command which audits
ALIAS "O\" ">OBEY \" !all activity.
NULLNULLSTOP !When log off occurs, stop
EXECUTEHANGUP !If you get a HANGUP command for the
!application, then stop
CHECKCONNECTION 1000 250 !After 10 seconds of no communications
!line activity, wait for 2.5 seconds for
!recovery. If no recovery, stop.
STOPONERROR 60,66,140,190,191 !If one of these errors occurs,
!terminate the session.
DONOTSTOP $*.*.PATHTCP2
BLANKPASSWORD !If PASSWORD is entered, replace the
!next word with 8 pound signs in the
!audit file
!audit file
TRACKVOLUME !If V or VOLUME is used to change
!the volume, change XYGATE/AC'S internal
!vol/subvol to match
TRACKUSERID !Use the user's userid for all calls
!to SETMODE (such as FILE OPENs)