HP e3000, Command Reference Manual

Page: 42 / 334

AL TSEC
Operation Notes
Y ou use the ALTSEC command to alter securit y pro visions for les, hierarchical
directories, devices, and device classes b y manipulating an ob ject's access
con trol denition (A CD) or its access mask. All of these ob jects may ha v e
A CDs, but only les ha v e access masks whic h can b e c hanged using this
command. An ob ject's A CD may b e altered using this command with the
A CD k eyw ords NEWACD , REPACD , COPYACD , ADDPAIR , REPPAIR , DELPAIR , DELACD ,
and MASK . A le's access mask may b e altered using either the ACCESS k eyw ord
or an access sp ecication without a k eyw ord. Using the ACCESS k eyw ord is a
recommended practice to help distinguish b et w een le access mask and A CD
op erations.
Only the o wner of a le can use the ALTSEC command to c hange a le's
access mask. Ob ject o wners and users with appropriate privilege can use this
command to manipulate an ob ject's A CD. Files and hierarchical directories
ha v e their o wner's iden tity and a le group ID (GID) stored in their le lab els.
System managers ha v e the appropriate privilege to manipulate the A CDs for
all ob jects. Accoun t managers for the accoun t matching an ob ject's GID ha v e
appropriate privilege. Devices are o wned b y system managers. The ability to
manipulate an A CD or le mask is not aected b y the ob ject access curren tly
granted to a user.
File A CDs o v erride le lo c kw ords and the le access matrix. A CDs p ermit
more precise access con trol than the le access matrix b y allo wing access
p ermissions to sp ecic users. MPE/iX allo ws y ou to sp ecify a maximum of
40 A CD pairs for a particular ob ject. Since a large n um b er of A CD pair
sp ecications o v ero ws the command line buer, y ou m ust en ter large n um b ers
of A CD sp ecications may b e en tered through an indirect le.
The ALTSEC command fails if y ou attempt to alter the access p ermissions for a
p ermanen t disk le whose group's home v olume set is not moun ted.
File Access Matrix Examples
Note
Y ou can use LISTFILE,4 to view the le access matrix.
2-30 MPE/iX Commands