beautypg.com

The priv-logon { on | off} attribute, Removing a file from safeguard control – HP Integrity NonStop J-Series User Manual

Page 56

background image

Securing Disk Files

Safeguard User’s Guide — 422089-020

3 - 22

The PRIV-LOGON { ON | OFF} Attribute

To verify the setting:

=INFO DISK progfile, DET

The PRIV-LOGON { ON | OFF} Attribute

The PRIV-LOGON { ON | OFF } attribute specifies whether the programfile (object disk
file) can request additional logon-related sensitive features and impose a delay for
failed authentication attempts.

The initial value is OFF.

PRIV-LOGON may also be used in the WHERE expression of a command to restrict
the scope of that command to files with PRIV-LOGON ON.

Removing a File From Safeguard Control

The DELETE DISKFILE command removes a file from the Safeguard database by
deleting the authorization record for the file. DELETE DISKFILE does not purge the file
itself.

When you remove a file from the Safeguard database, the file is no longer subject to
Safeguard authorization checks and auditing. The file is returned to Guardian security,
and it receives the security settings it had before being added to the Safeguard
database. Only the primary owner of a file, the primary owner's group manager, the
super ID, and users with OWNER authority on the access control list can use DELETE
DISKFILE to remove a file from Safeguard protection.

LAST-MODIFIED OWNER STATUS WARNING-MODE

$DATA.SALES

PROGFILE 24JUL05, 11:38 5,5 THAWED OFF

005,005 R,W,E,P

004,* R,E

005,* R,W

OBJECT-TEXT-DESCRIPTION =

AUDIT-PRIV-LOGON = OFF

AUDIT-ACCESS-PASS = NONE AUDIT-MANAGE-PASS = NONE

AUDIT-ACCESS-FAIL = NONE AUDIT-MANAGE-FAIL = NONE

LICENSE = OFF PROGID = ON CLEARONPURGE = OFF PERSISTENT = OFF

TRUST = SHARED PRIV-LOGON = OFF

Note. The attributes, AUDIT-PRIV-LOGON and PRIV-LOGON, are supported only on systems
running H06.11 and later H-series RVUs and G06.32 and later G-series RVUs. The OBJECT-
TEXT-DESCRIPTION attribute is supported only on systems running J06.05 and later J-series
RVUs and H06.16 and later H-series RVUs.

Note. This attribute is supported only on systems running H06.11 and later H-series RVUs.

This manual is related to the following products: