The priv-logon { on | off} attribute, Removing a file from safeguard control – HP Integrity NonStop J-Series User Manual
Page 56
Securing Disk Files
Safeguard User’s Guide — 422089-020
3 - 22
The PRIV-LOGON { ON | OFF} Attribute
To verify the setting:
=INFO DISK progfile, DET
The PRIV-LOGON { ON | OFF} Attribute
The PRIV-LOGON { ON | OFF } attribute specifies whether the programfile (object disk
file) can request additional logon-related sensitive features and impose a delay for
failed authentication attempts.
The initial value is OFF.
PRIV-LOGON may also be used in the WHERE expression of a command to restrict
the scope of that command to files with PRIV-LOGON ON.
Removing a File From Safeguard Control
The DELETE DISKFILE command removes a file from the Safeguard database by
deleting the authorization record for the file. DELETE DISKFILE does not purge the file
itself.
When you remove a file from the Safeguard database, the file is no longer subject to
Safeguard authorization checks and auditing. The file is returned to Guardian security,
and it receives the security settings it had before being added to the Safeguard
database. Only the primary owner of a file, the primary owner's group manager, the
super ID, and users with OWNER authority on the access control list can use DELETE
DISKFILE to remove a file from Safeguard protection.
LAST-MODIFIED OWNER STATUS WARNING-MODE
$DATA.SALES
PROGFILE 24JUL05, 11:38 5,5 THAWED OFF
005,005 R,W,E,P
004,* R,E
005,* R,W
OBJECT-TEXT-DESCRIPTION =
AUDIT-PRIV-LOGON = OFF
AUDIT-ACCESS-PASS = NONE AUDIT-MANAGE-PASS = NONE
AUDIT-ACCESS-FAIL = NONE AUDIT-MANAGE-FAIL = NONE
LICENSE = OFF PROGID = ON CLEARONPURGE = OFF PERSISTENT = OFF
TRUST = SHARED PRIV-LOGON = OFF
Note. The attributes, AUDIT-PRIV-LOGON and PRIV-LOGON, are supported only on systems
running H06.11 and later H-series RVUs and G06.32 and later G-series RVUs. The OBJECT-
TEXT-DESCRIPTION attribute is supported only on systems running J06.05 and later J-series
RVUs and H06.16 and later H-series RVUs.
Note. This attribute is supported only on systems running H06.11 and later H-series RVUs.