Domain Access Control List (ACL)
Sun Confidential: Internal Only
85
SunService Sun Microsystems, Inc. All Rights Reserved. Enterprise Services
Domain Access Control List (ACL)
Each domain has an associated ACL. The ACL is part of the security scheme
and works with domain level passwords.
The ACL restricts
addboard
or
deleteboard
requests to specific components
or, if desired, inhibits
addboard
or
deleteboard
requests for all platform
components.
If you have access rights (password) to a specific domain, you can add or
delete only the components identified in that domain’s ACL. The default
ACL for each domain contains all the platform slots (no restrictions).
The platform shell always has permission to add or delete boards.
Configuring ACLs
The ACLs for each domain can be set up using the
setupplatform
shell
command. Prefixing a slot name with a
-r
removes the board from the
list. Prefixing a slot name with a
-a
adds the board to the list. Typing a
plus (
+
) reinstates the entire list. Typing a dash (
-
) clears the list.
For example:
6800b-sc0:SC> setupplatform -p acls
ACLs
----
ACL for domain A [ SB0 SB1 SB2 SB3 SB4 SB5 IB6 IB7 IB8 IB9 ]: -r sb1 sb3 sb5 ib7 ib9
ACL for domain B [ SB0 SB1 SB2 SB3 SB4 SB5 IB6 IB7 IB8 IB9 ]: -r sb1 sb3 sb5 ib7 ib9
ACL for domain C [ SB0 SB1 SB2 SB3 SB4 SB5 IB6 IB7 IB8 IB9 ]: -r sb0 sb2 sb4 ib6 ib8
ACL for domain D [ SB0 SB1 SB2 SB3 SB4 SB5 IB6 IB7 IB8 IB9 ]: -r sb0 sb2 sb4 ib6 ib8
Viewing ACLs
6800b-sc0:SC> showplatform -p acls
ACL for Domain A: SB0 SB2 SB4 IB6 IB8
ACL for Domain B: SB0 SB2 SB4 IB6 IB8
ACL for Domain C: SB1 SB3 SB5 IB7 IB9
ACL for Domain D: SB1 SB3 SB5 IB7 IB9